[PATCHES] limit kerberos encryption types used by winbindd

Andrew Bartlett abartlet at samba.org
Mon Jul 25 04:57:46 UTC 2016


On Mon, 2016-07-25 at 07:17 +0300, Uri Simchoni wrote:
> On 07/24/2016 04:31 PM, Ira Cooper wrote:
> > 
> > 
> > That compiles.
> > 
> > I'll run Uri's patch at least, though my machine isn't a real test
> > env.
> > 
> > Cheers,
> > 
> > -Ira
> > 
> 
> The unit tests can't run because they need a testenv with an AD-DC,
> but
> using Alexander's patch to fix MIT build and some pointers from Ira
> on
> how to build for MIT I also manually tested it with MIT Kerberos as
> well.
> 
> Attached is a rebased patch due to the new leases default (no actual
> changes).

I'm glad to see we have replaced the use of DES in the generated
krb5.conf.

Andrew Bartlett

-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   
https://catalyst.net.nz/services/samba







More information about the samba-technical mailing list