Samba migrate from ver 4.11.11 to 4.12.5

Stefan Metzmacher metze at
Tue Jul 28 07:28:01 UTC 2020

Am 28.07.20 um 09:21 schrieb Isaac Boukris via samba-technical:
> On Tue, Jul 28, 2020 at 8:57 AM admin--- via samba-technical
> <samba-technical at> wrote:
>> I thing I have problem with encryption, ver 4.12 not supported DES and I
>> see in log:
>>   Kerberos: Server not found in database:
>> <mailto:ldap/debian.prawda.local/prawda.local at PRAWDA.LOCAL>
>> ldap/debian.prawda.local/prawda.local at PRAWDA.LOCAL: encryption type 3 not
>> supported
>> How migrate old database encryption to supportet in samba 4.12?
> It's technically not possible to convert DES hashes to another encryption type.
>> Change user password not help.
> Try resetting the server secret and regenerate its keytab (ldap/debian).

No, I don't think that's useful.
Adjusting msDS-SupportedEncryptionTypes for debian.prawda.local from 31
to 28 should help.

@Isaac didn't we had a fix and a bug report for the problem already?


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <>

More information about the samba-technical mailing list