supplementalCredentials with aes keys?

[Luke Howard]

>have you ever seen keys other than ENCTYPE_DES_CBC_CRC(1) and
>ENCTYPE_DES_CBC_MD5(3) in the Primary:Kerberos blob?

No, because those are the only types (apart from rc4-hmac, which
is in unicodePwd) supported.

Also when replicating non-DES keys to AD domain controllers using
my understanding of the syntax (which may be wrong), it appeared
that AD would have trouble parsing the attribute.

-- Luke

--
www.padl.com | www.lukehoward.com