[Samba] Windows XP SP3 cannot join to the Samba AD domain on Debian 11 4.17.10

[Kees van Vloten]

Op 13-09-2023 om 11:11 schreef Rowland Penny via samba:
> On Wed, 13 Sep 2023 11:45:10 +0300
> Michael Tokarev via samba <samba at lists.samba.org> wrote:
>
>> 12.09.2023 22:36, Andrew Bartlett via samba:
>>> Thanks.  Can you please write up a wiki page with these details?
>> Andrew, are you sure we wan this info easily findable on the wiki? :)
>> I mean, it is terrible, it really is.. I wonder if Microsoft allows
>> to join WinXP machines to the current AD domain.  The thing is that
>> whole thing should not be used in 2023+, period.  Yes, I understand
>> there might be various interesting use cases, but that often can be
>> done on a stand-alone WinXP machine, not joined to a domain, - so the
>> whole domain isn't crippled.
> Hello Michael, I feel the same as yourself, I just wish that XP would
> go away. The problem is that there are very expensive pieces of
> equipment out there that use an embedded version of XP and these will
> not go away. There are ways around them, such as 'sandboxing' them.
>
> What I think the whole 'embedded' thing has shown, is that you really
> shouldn't buy any expensive equipment that has a computer that
> cannot be updated/upgraded easily.
I don't know anything about this use-case for XP, but I do know that 
things like ATMs in the past used very old software, some 10 years ago, 
some were still using Windows NT...

Now if you are into this kind of business, there is probably not much 
you can choose. There are a few vendors and you have a long term 
relation with one or two them. Replacing an ATM is not a simple job, let 
alone hundreds of them.
>
> Rowland
>
>> It's interesting that Win2003 does not require all the same
>> low-security settings.
>>
>> BTW, Paolo, I'm curious, - which licensing concerns/issues do you
>> have? Microsoft does not sell these versions of windows anymore.  But
>> granted, I've no idea what actual terms applies to already sold
>> products now, way past end-of-life.
>>
>> Myself, I can't say I'm a "software pirate", but I do use many
>> versions of windows on my own home machine - to test how windows
>> behaves in various versions of QEMU and sometimes test them with
>> samba too, - to ensure we ship good samba or qemu able to run
>> windows. I don't have licenses for them, and I've no idea if such
>> usage is legal or not (more likely not)..
>>
>>> This does disable all AES use, it is unfortunate that you had to set
>>> the supported enctypes = 4, there may be a better way to do this.
>> [...]
>>
>>
>