[Samba] Samba 3.0.2a with ADS w2k3 Active Directory, enctypes

Neeme Reinmets Neeme.Reinmets at ergo.com.ee
Fri Jun 4 10:14:39 GMT 2004


Once again on that topic, 
I took a time and watched W2003 Server Log more closely about ticket 
exchange between samba and W2003.
W2003 AD appears to like to use an encryption type 0x17 i.e. 23 i.e. 
arcfour-hmac-md5 instead of an encryption type 0x3 i.e. des-cbc-md5, what 
W2000 AD liked to use.

As soon W2003 server receives request for (or responds with) encryption 
type des-cbc-md5, the connection fails.

I'm wondering why samba still tries to use des-cbc-md5 even if I specify, 
default_tgs_enctypes = arcfour-hmac-md5
default_tgs_enctypes = arcfour-hmac-md5
permitted_enctypes = arcfour-hmac-md5



More information about the samba mailing list