samba - Jan 2015 - 2.2.7 to 3.3.12 upgrade issue

Upgraded an AIX Server from AIX 5.3 TL3 with Samba 2.2.7 to AIX 7.1 TL3 
with 3.3.12. Client uses AD authentication.
Upgrade did not change smb.passwd or smb.conf.

Windows users trying to mount a share are presented a request for their 
credentials; whether they supply the AD or AIX credentials, the access 
is denied - "Logon failure: unknown user name or bad password." The
smbd
and nmbd processes start without error. I presume that as the server was 
working, it is already registered in the domain. I would not expect the 
OS version change to affect that registration.

With AD authentication, I would presume that I need to capture something 
on the AD side to see what's happening? But I don't envision that the AD
just blesses the credentials and opens a link to the server.

What will help me identify the problem?

--
Regards,
Bob Wyatt

On Tue, Jan 27, 2015 at 12:03:22AM -0500, Bob Wyatt
wrote:
> Upgraded an AIX Server from AIX 5.3 TL3 with Samba 2.2.7 to AIX 7.1
> TL3 with 3.3.12. Client uses AD authentication.
> Upgrade did not change smb.passwd or smb.conf.
> 
> Windows users trying to mount a share are presented a request for
> their credentials; whether they supply the AD or AIX credentials,
> the access is denied - "Logon failure: unknown user name or bad
> password." The smbd and nmbd processes start without error. I
> presume that as the server was working, it is already registered in
> the domain. I would not expect the OS version change to affect that
> registration.
> 
> With AD authentication, I would presume that I need to capture
> something on the AD side to see what's happening? But I don't
> envision that the AD just blesses the credentials and opens a link
> to the server.
> 
> What will help me identify the problem?
Debug level 10 logs of smbd might. But please be aware that
3.3 is out of maintenance since August 2011, which is more
than 3 years ago. You might want to contact your AIX support
for a more recent Samba version or support of this ancient
Samba version.

With best regards,

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 G?ttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG G?ttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de

On 27/01/15 05:03, Bob Wyatt wrote:
> Upgraded an AIX Server from AIX 5.3 TL3 with Samba 2.2.7 to AIX 7.1 
> TL3 with 3.3.12. Client uses AD authentication.
> Upgrade did not change smb.passwd or smb.conf.
Yes but what are they authenticating to ? windows 2003 or 2008 or 2012 ? 
perhaps the smb.conf does need updating, things change between samba 
versions.

You will probably be better off upgrading yet again to the latest 
package available here: http://www.perzl.org/aix/index.php?n=main.samba

A look at your smb.conf may help.

Rowland
>
> Windows users trying to mount a share are presented a request for 
> their credentials; whether they supply the AD or AIX credentials, the 
> access is denied - "Logon failure: unknown user name or bad
password."
> The smbd and nmbd processes start without error. I presume that as the 
> server was working, it is already registered in the domain. I would 
> not expect the OS version change to affect that registration.
>
> With AD authentication, I would presume that I need to capture 
> something on the AD side to see what's happening? But I don't
envision
> that the AD just blesses the credentials and opens a link to the server.
>
> What will help me identify the problem?
>
> -- 
> Regards,
> Bob Wyatt
>