Odd problem with Active Directory
Ravi Channavajhala
ravi.channavajhala at dciera.com
Thu Dec 17 04:33:33 EST 2009
On Thu, Dec 17, 2009 at 2:18 PM, Michael Calmer <mc at suse.de> wrote:
> One solution would be to tell the Windows Server, that your kerberos
> installation do not support aes.
>
> [libdefaults]
> ...
> default_tkt_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5
> default_tgs_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5
>
> I hope this helps.
I remember a conversation from Samba group some time ago in which it
is possible to set the msDS-SupportedEncryptionTypes from the client.
>
> --
> MFG
>
> Michael Calmer
--
Ravi Channavajhala
CTO
http://www.dciera.com
More information about the Kerberos
mailing list