[PATCH] Patches come from Centrify Corp.
Stefan (metze) Metzmacher
metze at samba.org
Tue May 12 14:03:13 GMT 2009
>> 2) clikrb5.c.patch, sasl.c.patch
>> Win2k8 encryption support, add AES into encryption list. Win2k8 uses AES as the preferred encryption if it runs in win2k8 function level. If we use `kinit administrator` to create kerberos cache first, and then run `net ads user` without specifying the account explicitly, net doesn't work. This patch resolves this.
> I would rather see us remove this entirely, and use the defaults. Since
> we needed this, the Kerberos libs have impoved their defaults, and
> hopefully there are not too many brain-dead config files left around
We need to be very careful with this, as it changes the session key for
smb signing and I think samba3 needs a little bit of work to support them.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 252 bytes
Desc: OpenPGP digital signature
Url : http://lists.samba.org/archive/samba-technical/attachments/20090512/a511388a/signature.bin
More information about the samba-technical