[Samba] 4.20: smb.conf include = %I.conf / server min protocol

[Rowland Penny]

On Fri, 14 Mar 2025 12:07:44 +0000
Moertenhumer Martin via samba <samba at lists.samba.org> wrote:

> Hello, 
> 
> in the past I've used host-based configurations to allow older
> Windows XP machines to connect to recent servers (without reducing
> security for the entire network). Up until samba 4.19 this worked for
> me. Using 4.20 I'm facing the issue that  "server min protocol = NT1"
> does not work when set in include=.../%I.conf. (setting server min
> protocol = NT1 in smb.conf's global section works). 
> 
> Any insights/ideas are highly appreciated.
> 

I recently found that the '%u' and '%U' variables do not return what
you would expect. I have 'winbind use default domain = yes' set in
smb.conf, so expect just the username for '%u' or '%U', but '%u'
now returns '$NETBIOS_DOMAINusername and '%U' returns
'username_$DNS_DOMAIN'. I wonder if '%I' isn't returning the IP address
correctly ?

Rowland