supplementalCredentials with aes keys?

[Stefan (metze) Metzmacher]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Stefan (metze) Metzmacher schrieb:
> Hi Love,
> 
>>> can you or someone else  with a windows ads server with support for AES
>>> krb5 keys, send me the output of the following comments
>> I wont be able to do this for some time (on vacation).
> ok, I'll wait for you or simo, to provide me this info...
> 
> Do you know which enctypes longhorn supports?
> 
> They same as the current heimdal?:
> /* the 3 DES types must be first */
> static const krb5_enctype all_etypes[] = {
>     ETYPE_DES_CBC_MD5,
>     ETYPE_DES_CBC_MD4,
>     ETYPE_DES_CBC_CRC,
>     ETYPE_AES256_CTS_HMAC_SHA1_96,
>     ETYPE_ARCFOUR_HMAC_MD5,
>     ETYPE_DES3_CBC_SHA1
> };
> 
> Maybe you have a capture of a kinit against longhorn,
> which contains the enctype salt mappings in the preauth-required reply...

Hi Andrew,

I just read this
"05/17/05  5:17:33 * abartlet will have to get a new longhorn image..."

in http://samba.sernet.de/irclog/2005/05/20050517-Tue.log

do you have some captures you made in this time of krb5 traffic between
heimdal/samba4 and longhorn?

metze
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFF2LI7m70gjA5TCD8RAuOkAJ98e867jbMXtvEd5+rlHLiZdN5KLACbBoVT
z2+NcI0ebDIn3EdQNekP+cE=
=LGnp
-----END PGP SIGNATURE-----