[Samba] Some clients cannot change their passwords when they expire.

[Rowland penny]

On 03/06/2020 15:08, Rommel Rodriguez Toirac via samba wrote:
> The operating systems used as clients in our network range mainly from Windows XP to Windows 10.
>
> With Windows XP operating systems is happening that when it comes time for a user to change their password, they cannot do it, because the system tells them that they cannot find the domain or it is not available. So I have to change it directly on the samba4 server and that's when they can start their sessions. This situation is happening to me only with PCs with Windows XP operating systems.
>
> What could be happening?

You now also have (as the default) in smb.conf:

client min protocol = SMB2_02
server min protocol = SMB2_02

This means NTLMv1 is turned off and XP uses this by default, so you have 
a few options, change the Samba defaults (not recommended), make your XP 
machines use NTLMv2 or better still, stop using XP as it is six years 
since it went EOL.

Rowland