[Samba] Samba 3.0.2a and ADS w2k3 Kerberos authentication problem

[Jim McDonough]

>I am using Samba 3.0.2a as Domain member into ADS w2k3 domain. net ads
>join -U administrator work fine.
>wbinfo -u and -g works fine.
>I am able to mapped Samba shares with IP address (\\192.168.0.x\share)
>but it does not works if I use netbios name ( \\redhat9\share) the
>system asks me for authentication but never I get into the Samba server
>( Login and password are invalid ).

>Kerberos packed is 1.2.27 default redhat9 included.
Well, when I read this last line, I assumed that you've just run into the
w2k3 doesn't deal with non-rc4-hmac kerberos (that would be pre-1.3 MIT
kerberos), but it is strange that you can map via IP address...

There are several things to try here:
-upgrade kerberos to post 1.3
-try fixing windows, which has multiple options.  See
http://support.microsoft.com/default.aspx?scid=kb;en-us;833708

But the fact that it works via IP address puzzles me...

----------------------------
Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA

jmcd at us.ibm.com
jmcd at samba.org

Phone: (207) 885-5565
IBM tie-line: 776-9984