supplementalCredentials with aes keys?
lukeh at padl.com
Mon Feb 19 04:20:18 GMT 2007
>have you ever seen keys other than ENCTYPE_DES_CBC_CRC(1) and
>ENCTYPE_DES_CBC_MD5(3) in the Primary:Kerberos blob?
No, because those are the only types (apart from rc4-hmac, which
is in unicodePwd) supported.
Also when replicating non-DES keys to AD domain controllers using
my understanding of the syntax (which may be wrong), it appeared
that AD would have trouble parsing the attribute.
www.padl.com | www.lukehoward.com
More information about the samba-technical