I'm seeing an odd quirk running samba 3.0.21c & winbind
with kerberos 1.3.4 joining a windows 2000 ADS domain
on RHEL3.

The Samba server's hostname is "staging".

I run:
/usr/kerberos/bin/kinit Administrator@DOMAIN.COM
net ads join

Then I start up winbind and smb. winbind works prefectly.
I can log in as a domain user from via sshd/PAM, and the
getent passwd
getent group

Shows my domain users and groups just fine. In addition,
I can see a machine named "staging" in my PDC's Computer

From a Windows XP domain member on the network, I can
see a server named "Staging" in my network places
browse list. But if I click it I can't log in, and I
see this in /var/log/samba/my.ip.goes.here.log:

[2006/03/30 12:13:24, 2] smbd/sesssetup.c:setup_new_vc_session(772)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2006/03/30 12:13:24, 1] smbd/sesssetup.c:reply_spnego_kerberos(197)
Failed to verify incoming ticket!

HOWEVER, if I attempt to access the samba machine
directly using this URL syntax:

Then it works fine. It would appear that samba/kerberos
doesn't want to respond to just:

Is this a bug, or an error in my config?
I'll be happy to provide more config info if needed.
Any ideas?

To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba