s3 member server to s4 kerberos trouble
Matthieu Patou
mat at samba.org
Mon Jun 21 01:12:19 MDT 2010
>>>
>>>
>>>> Looking at the code
>>>> I didn't saw much lookup to this attribute so I wonder how do we decide
>>>> which encoding the requested principal support.
>>>>
>>>>
>>> Correct, we need to use msDS-SupportedEncryptionTypes in kdc/db-glue.c
>>> near where we look at UF_USE_DES_KEY_ONLY.
>>>
>>> The trickier part is that we need to have Samba4's domain join call the
>>> netlogon 'GetDomainInfo' call to set it's use of the full set of
>>> encryption types (and the DNS name).
>>>
>>> Attached is my proposed solution
>>>
>> I'll try to give a try ;-)
>>
>>
> Did it help?
>
>
Didn't test it yet, sorry
--
Matthieu Patou
Samba Team http://samba.org
More information about the samba-technical
mailing list