samba4 refuses to auth one user

Andrew Bartlett abartlet at
Fri Jul 22 17:47:53 MDT 2011

On Fri, 2011-07-22 at 19:12 +0200, Pavel Herrmann wrote:
> Hi,
> I have a little problem with my samba4 (which is otherwise great, good job 
> guys!), it refuses to authenticate one of my users (yes the password is 
> correct, tried resetting it)
> the users name is domname at domname.tld - basically it works as a shared mailbox 
> for staff, not as a real user.

> is this some special account name which cannot be used? or where else can be 
> the problem?

Is this a samAccountName, or a userPrincipalName (which ldap attribute
is that exact value in?)

In AD, the @ is special, as if it's the samAccountName we would have
domname at domname.tld@domname.tld which isn't a valid principal.

Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 

More information about the samba-technical mailing list