[Samba] Change of kerberos encryption from DES to AES

[Masopust, Christian]

Hello all,
 
as our Windows DCs will switch off DES encryption in the near future I
have to change our
Samba-Server to AES encryption.
 
If I understand it correctly I have to change kerberos-configuration to
new encryption type
(aes256-cts-hmac-sha1-96) and then re-join my Samba-Server to the
domain.
 
Is this correct?  Any other things to consider?
 
Thanks a lot,
Christian