[Samba] Fwd: Unable to change passwords from Win XP Pro clients

[Rowland Penny]

On Fri, 21 Apr 2017 12:00:59 -0400
Eleuterio Contracampo via samba <samba at lists.samba.org> wrote:

> [2017/04/21 12:47:55.219297, 0]
> ../auth/gensec/gensec.c:257(gensec_verify_dcerpc_auth_level)
> 
> Did not manage to negotiate mandetory feature SIGN for dcerpc
> auth_level 6
> 

I think you may be running into an artefact of the badlock patches, for
which Win7 will have received patches, but there are no patches for XP
as it is no longer supported.

Try setting 'client ipc signing =' to 'auto' or 'disabled', but note
this will affect win7 as well.

See here, for more info:

https://wiki.samba.org/index.php/Samba_4.3_Features_added/changed#CVE-2016-2115:

Rowland