Samba migrate from ver 4.11.11 to 4.12.5

[Stefan Metzmacher]

Am 28.07.20 um 09:21 schrieb Isaac Boukris via samba-technical:
> On Tue, Jul 28, 2020 at 8:57 AM admin--- via samba-technical
> <samba-technical at lists.samba.org> wrote:
>>
>>
>> I thing I have problem with encryption, ver 4.12 not supported DES and I
>> see in log:
>>
>>   Kerberos: Server not found in database:
>> <mailto:ldap/debian.prawda.local/prawda.local at PRAWDA.LOCAL>
>> ldap/debian.prawda.local/prawda.local at PRAWDA.LOCAL: encryption type 3 not
>> supported
>>
>> How migrate old database encryption to supportet in samba 4.12?
> 
> It's technically not possible to convert DES hashes to another encryption type.
> 
>> Change user password not help.
> 
> Try resetting the server secret and regenerate its keytab (ldap/debian).

No, I don't think that's useful.
Adjusting msDS-SupportedEncryptionTypes for debian.prawda.local from 31
to 28 should help.

@Isaac didn't we had a fix and a bug report for the problem already?

metze

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20200728/3d4b0c86/signature.sig>