[Patch] Make samba4 return a correct Supported Encryption

[Andrew Bartlett]

On Mon, 2009-09-07 at 10:07 +0400, Matthieu Patou wrote:
> Hello,
> 
> Please Find attached a patch that allow S4 to return correctly the 
> SupportedEncryption in the getDomainInfo RPC.
> 
> This patch make the assumption that by default if the 
> msDS-SupportedEncryptionTypes is not populated then the workstation 
> support all the encryption up to RC4 (same assumption as Windows 2008 
> and upper do).

Didn't Microsoft indicate that this also depends on the 'DES' bit on the
account?

Or does this apply differently in the KDC to netlogon?

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20090907/74e69d4d/attachment.pgp>