samba - Oct 2016 - upgrading the existing SAMBA 2.7 to 4.3.8 version and getting authentication error.

Hi Team,
Good day!

We are upgrading the SAMBA version 2.7 fro 4.3.8 in our AIX server which is
running in AIX 6.1 version. and SAMBA share all accessed by windows 7
client.

after upgrading to version 4.3.8 user's notable to connect the SAMBA share
and getting access denied error. In earlier version we have used
*security=server* option and had pass thru server for Authentication. now
we couldn't use that option and getting. Please advise what is default
setting for samba version 4 and how to enable the user authentication?


Hostname:root:/home/root # testparm /etc/samba/smb.conf
Load smb config files from /etc/samba/smb.conf
*WARNING: Ignoring invalid value 'server' for parameter
'security'*
*Error loading services.*


*Authentication Error:-*

2016/09/30 11:32:10.121823,  3]
../source3/auth/auth.c:178(auth_check_ntlm_password)
  check_ntlm_password:  Checking password for unmapped user
[Domain]\[User]@[Local hostname] with the new password interface
[2016/09/30 11:32:10.121873,  3]
../source3/auth/auth.c:181(auth_check_ntlm_password)
  check_ntlm_password:  mapped user is: [SAMBA server name]\[User]@[Local
Hostname]
[2016/09/30 11:32:10.122005,  3]
../source3/auth/check_samsec.c:400(check_sam_security)
  check_sam_security: Couldn't find user 'User' in passdb.
[2016/09/30 11:32:10.122049,  2]
../source3/auth/auth.c:315(auth_check_ntlm_password)
  check_ntlm_password:  Authentication for user [User] -> [User] FAILED
with error NT_STATUS_NO_SUCH_USER
[2016/09/30 11:32:10.122122,  2]
../auth/gensec/spnego.c:708(gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_NO_SUCH_USER
[2016/09/30 11:32:10.124730,  3]
../source3/smbd/server_exit.c:252(exit_server_common)
  Server exit (NT_STATUS_CONNECTION_RESET)

Regards
Gopi

Kathirvel Gopinath via samba <samba at lists.samba.org> writes:
> after upgrading to version 4.3.8 user's notable to connect the SAMBA
share
> and getting access denied error. In earlier version we have used
> *security=server* option and had pass thru server for Authentication. now
> we couldn't use that option and getting. Please advise what is default
> setting for samba version 4 and how to enable the user authentication?
security=domain or security=ads is what you need. For that, you need to
join your domain. There's plenty of documentation out there how to do
that.

Volker