[PATCH] Patches come from Centrify Corp.

[Stefan (metze) Metzmacher]

>> 2) clikrb5.c.patch, sasl.c.patch
>> Win2k8 encryption support, add AES into encryption list. Win2k8 uses AES as the preferred encryption if it runs in win2k8 function level.  If we use `kinit administrator` to create kerberos cache first, and then run `net ads user` without specifying the account explicitly,  net doesn't work. This patch resolves this.
> 
> I would rather see us remove this entirely, and use the defaults.  Since
> we needed this, the Kerberos libs have impoved their defaults, and
> hopefully there are not too many brain-dead config files left around

We need to be very careful with this, as it changes the session key for
smb signing and I think samba3 needs a little bit of work to support them.

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
Url : http://lists.samba.org/archive/samba-technical/attachments/20090512/a511388a/signature.bin