sspi authentication

[Craig Perras <cperras(at)u(dot)washington(dot)edu>]

i'm trying to enable sspi authentication with the latest postgresql 
(8.3.4) on windows 2003 (standard edition, sp2, latest updates).

i configured pg_hba.conf:

host all all <my-ip>/32 sspi

but get this error when connecting from an xp client (via pgAdmin III): 
"Error connecting to the server: FATAL:  SSPI authentication failed for 
user "postgres"."

i'm very much in the dark about how to configure this, esp. with windows 
(eg: Group Policy). i googled for Group Policy and postgresql, but i 
didn't find anything obvious about what I should do. my understanding is 
that sspi should authenticate (transparently) via windows authentication 
with the currently logged-in user, and, if successful, map that user to 
the postgresql login-role specified in the connection string (in my case, 
postgres). i presume the mapping is automatic as long as the user is 
listed in the pg_hba.conf file.

so, i guess my question is, how can i track down the problem? i presume 
it's something in windows security, but maybe i should do something in 
postgresql.conf (the docs are extremely confusing; there's very little 
about sspi - just a couple sentences - mostly consisting of a reference to 
gssapi, which refers to kerberos, and in the end i'm left unsure whether i 
should set anything or not, even for the simple case of all-windows 
clients).

i see nothing in the system event logs or the postgres logs except: SSPI 
authentication failed for user "postgres"

i saw a comment about "Guest" being the default if simple networking is 
enabled, which doesn't make sense to me, but i don't think that's enabled 
(or even an option on windows 2003 server?).

any help is appreciated!!

thanks,
--craig