supplementalCredentials with aes keys?

Luke Howard lukeh at
Mon Feb 19 04:20:18 GMT 2007

>have you ever seen keys other than ENCTYPE_DES_CBC_CRC(1) and
>ENCTYPE_DES_CBC_MD5(3) in the Primary:Kerberos blob?

No, because those are the only types (apart from rc4-hmac, which
is in unicodePwd) supported.

Also when replicating non-DES keys to AD domain controllers using
my understanding of the syntax (which may be wrong), it appeared
that AD would have trouble parsing the attribute.

-- Luke

-- |

More information about the samba-technical mailing list