[Patch] Make samba4 return a correct Supported Encryption

Andrew Bartlett abartlet at samba.org
Mon Sep 7 00:40:10 MDT 2009

On Mon, 2009-09-07 at 10:07 +0400, Matthieu Patou wrote:
> Hello,
> Please Find attached a patch that allow S4 to return correctly the 
> SupportedEncryption in the getDomainInfo RPC.
> This patch make the assumption that by default if the 
> msDS-SupportedEncryptionTypes is not populated then the workstation 
> support all the encryption up to RC4 (same assumption as Windows 2008 
> and upper do).

Didn't Microsoft indicate that this also depends on the 'DES' bit on the

Or does this apply differently in the KDC to netlogon?

Andrew Bartlett

Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20090907/74e69d4d/attachment.pgp>

More information about the samba-technical mailing list