RC4 support with kerberos (was: Re: Samba and legacy Windows support)
Andrew Bartlett
abartlet at samba.org
Wed Oct 9 23:00:44 UTC 2019
On Tue, 2019-10-08 at 10:59 +0200, Andreas Schneider via samba-
technical wrote:
> * When can we remove RC4 support with Kerberos?
I do note that unicodePwd being an unsalted hash is used by a lot of
folks doing domain migrations, and (when it works) the Azure sync
service.
Also the password history is in this hash.
I would like, if I ever get time, to build a Samba mode without it (and
with a crypt() hash as an alternative inbound sync), but it will be
with us for a while.
Andrew Bartlett
--
Andrew Bartlett https://samba.org/~abartlet/
Authentication Developer, Samba Team https://samba.org
Samba Developer, Catalyst IT
https://catalyst.net.nz/services/samba
More information about the samba-technical
mailing list