If a user has a name which is equal to the name of the domain or workgroup he is rejected (another password prompt when using Windows). The Samba log says "User <username> not in 'valid users'". The problem seems to exist since 3.0.23.
*** This bug has been marked as a duplicate of 3939 ***