[PATCH] Joining a Windows Server 2008 (Longhorn)

David Holder david.holder at erion.co.uk
Mon Jan 28 23:34:58 GMT 2008


Gerald (Jerry) Carter wrote:
> Gerald (Jerry) Carter wrote:
>
>   
>> Pretty sure this has to do with the advertized enc types and
>> the one selected by the DC.    The successful TGS reply on
>> openSUSE client uses RC4-HMAC.  But on the failed cases,
>> the TGS reply is using AES.  I think we are just not handling
>> the user session correctly with AES.  But I'm still looking.
>>     
>
> ok.  Until we figure out the AES session key issue, I've
> restricted enctypes in the krb5.conf that we create to the 3
> types supported by Windows 2003.  I'll push the patch upstream
> soon and if would be good to get a second confirmation that
> it solves the problem.
>
>   
Let me know when it is pushed upstream and I'll pull it and try it out.

David


More information about the samba-technical mailing list