RC4 support with kerberos (was: Re: Samba and legacy Windows support)

Andrew Bartlett abartlet at samba.org
Wed Oct 9 23:00:44 UTC 2019


On Tue, 2019-10-08 at 10:59 +0200, Andreas Schneider via samba-
technical wrote:
> * When can we remove RC4 support with Kerberos?

I do note that unicodePwd being an unsalted hash is used by a lot of
folks doing domain migrations, and (when it works) the Azure sync
service.  

Also the password history is in this hash.

I would like, if I ever get time, to build a Samba mode without it (and
with a crypt() hash as an alternative inbound sync), but it will be
with us for a while.

Andrew Bartlett

-- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba






More information about the samba-technical mailing list