[PATCH] Joining a Windows Server 2008 (Longhorn)

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gerald (Jerry) Carter wrote:

> Pretty sure this has to do with the advertized enc types and
> the one selected by the DC.    The successful TGS reply on
> openSUSE client uses RC4-HMAC.  But on the failed cases,
> the TGS reply is using AES.  I think we are just not handling
> the user session correctly with AES.  But I'm still looking.

ok.  Until we figure out the AES session key issue, I've
restricted enctypes in the krb5.conf that we create to the 3
types supported by Windows 2003.  I'll push the patch upstream
soon and if would be good to get a second confirmation that
it solves the problem.





cheers, jerry
- --
=====================================================================
Samba                                    ------- http://www.samba.org
Likewise Software          ---------  http://www.likewisesoftware.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHng/9IR7qMdg1EfYRAs+QAJwOagKfoVXscfpJyN+5qh7qpNVKMgCdG98N
JPX+P030nGh9TYLCIp8eoXY=
=2XiX
-----END PGP SIGNATURE-----