samba - Aug 2020 - Windows XP issues

HI to all!

My Name is Juan Franco. I'm from Argentina, I work in a big gubernamental
organization and we are migrating our deprecated (smb3 + Ldap + NT4) to
Samba 4 AD DC:

But I have some issues with newer versions. if I install a version newer to
4.9.x. Windows XP can't join the domain.

The error message is ".. No *more connections can* be *made* to this remote
computer at this time", but with older versions i dont have the issue.

Any ideas?
Greetings!

On Fri, 2020-08-21 at 19:38 -0300, Franco Suarez via samba
wrote:
> HI to all!
> 
> My Name is Juan Franco. I'm from Argentina, I work in a big
gubernamental
> organization and we are migrating our deprecated (smb3 + Ldap + NT4) to
> Samba 4 AD DC:
> 
> But I have some issues with newer versions. if I install a version newer to
> 4.9.x. Windows XP can't join the domain.
> 
> The error message is ".. No *more connections can* be *made* to this
remote
> computer at this time", but with older versions i dont have the issue.
We turned NTLM authentication off by default, you may need to tell
Windows XP to use NTLMv2, and we turned SMB1 off by default in even
more recent versions, you will need to turn that back on.

Of course Windows XP is long expired, but I realise you can only
upgrade one thing at a time (within stress and resource constraints),
so just make sure you get to it soon!

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

Thanks Andrew for the answer.

But even if I enable Windows XP to use NTLMv2 (using Regedit on
(HKEY_LOCAL_MACHINE/SYSTEM/CURRENTCONTROLSET/CONTROL/LSA
LMCOMPATIBILITYLEVEL to 5) and adding  "ntlm auth = ntlmv1-permitted"
to my
smb.conf

Still the same error. (No *more connections can* be *made* to this remote
computer at this time) in versions higher than 4.10.

Any ideas?
Best Regards
Juan Franco.

El vie., 21 ago. 2020 a las 20:01, Andrew Bartlett (<abartlet at
samba.org>)
escribi?:
> On Fri, 2020-08-21 at 19:38 -0300, Franco Suarez via samba wrote:
> > HI to all!
> >
> > My Name is Juan Franco. I'm from Argentina, I work in a big
gubernamental
> > organization and we are migrating our deprecated (smb3 + Ldap + NT4)
to
> > Samba 4 AD DC:
> >
> > But I have some issues with newer versions. if I install a version
newer
> to
> > 4.9.x. Windows XP can't join the domain.
> >
> > The error message is ".. No *more connections can* be *made* to
this
> remote
> > computer at this time", but with older versions i dont have the
issue.
>
> We turned NTLM authentication off by default, you may need to tell
> Windows XP to use NTLMv2, and we turned SMB1 off by default in even
> more recent versions, you will need to turn that back on.
>
> Of course Windows XP is long expired, but I realise you can only
> upgrade one thing at a time (within stress and resource constraints),
> so just make sure you get to it soon!
>
> Andrew Bartlett
>
> --
> Andrew Bartlett                       http://samba.org/~abartlet/
> Authentication Developer, Samba Team  http://samba.org
> Samba Developer, Catalyst IT
> http://catalyst.net.nz/services/samba
>
>
>