s3 member server to s4 kerberos trouble

Matthieu Patou mat at samba.org
Mon Jun 21 01:12:19 MDT 2010


>>>
>>>        
>>>> Looking at the code
>>>> I didn't saw much lookup to this attribute so I wonder how do we decide
>>>> which encoding the requested principal support.
>>>>
>>>>          
>>> Correct, we need to use msDS-SupportedEncryptionTypes in kdc/db-glue.c
>>> near where we look at UF_USE_DES_KEY_ONLY.
>>>
>>> The trickier part is that we need to have Samba4's domain join call the
>>> netlogon 'GetDomainInfo' call to set it's use of the full set of
>>> encryption types (and the DNS name).
>>>
>>> Attached is my proposed solution
>>>        
>> I'll try to give a try ;-)
>>
>>      
> Did it help?
>
>    
Didn't test it yet, sorry

-- 
Matthieu Patou
Samba Team        http://samba.org



More information about the samba-technical mailing list