[Samba] SAMBA 4.14.4 now prompts for userid and password after AIX 7.1 to 7.2 Upgrade

[Philip Cunio]

Hello Team:

After an upgrade to AIX 7200-05-04-2220 from 7100-05-05-1939, SAMBA 4.14.4
now prompts for userid and password from Windows 10 and Windows 11 clients
attempting to map a drive. This was not required by SAMBA before the
upgrade. Two other systems that have AIX 7.2 upgrades with SAMBA 4.14.4 are
functioning correctly and do not prompt for userid and password.(for
existing userids/accounts). The method used to perform the upgrades for all
3 systems was the same (NIM Alternate Disk Migration), Also, the smb.conf
on all 3 systems is the same. In the log I see the following failure:

[2022/11/28 16:48:30.181656, 1]
../../source3/librpc/crypto/gse.c:666(gse_get_server_auth_token)
gss_accept_sec_context failed with [ Miscellaneous failure (see text):
Failed to find cifs/xxxx at YYYYY.COM(kvno 4) in keytab MEMORY:cifs_srv_keytab
(aes256-cts-hmac-sha1-96)]

[global]
workgroup = ZZZ
realm = YYYYY.COM
interfaces = 10.150.129.6
netbios name = xxxx
security = ADS
log file = /var/samba/log/log.%m
log level = 3 passdb:5 auth:5
wins server = corp-inm-dc2.inmar.com
password server = corp-inm-dc2.inmar.com
socket address = 10.150.129.6
server min protocol = SMB2
server signing = mandatory
create mask = 0666
follow symlinks = yes
unix extensions = no



(the xxxx, YYYYY and ZZZ are redactions of the actual system name for
security reasons)


Any assistance on finding what is causing this would be greatly
appreciated!

Regards,
Phil

-- 


********************************************



 

*Inmar Confidentiality 
Note*:  This e-mail and any attachments are confidential and intended to be 
viewed and used solely by the intended recipient.  If you are not the 
intended recipient, be aware that any disclosure, dissemination, 
distribution, copying or use of this e-mail or any attachment is 
prohibited.  If you received this e-mail in error, please notify us 
immediately by returning it to the sender and delete this copy and all 
attachments from your system and destroy any printed copies.  Thank you for 
your cooperation.



 

*Notice of Protected Rights*:  The removal of any 
copyright, trademark, or proprietary legend contained in this e-mail or any 
attachment is prohibited without the express, written permission of Inmar, 
Inc.  Furthermore, the intended recipient must maintain all copyright 
notices, trademarks, and proprietary legends within this e-mail and any 
attachments in their original form and location if the e-mail or any 
attachments are reproduced, printed or distributed.

 

********************************************