[Samba] samba, kerberos, encryption types

[Vladimir Vassiliev]

Hi all!

Does samba support AES encryption for use with Win2008 controller domains?
If so, why automatically generated krb5.conf still contains only RC4-HMAC DES-CBC-CRC DES-CBC-MD5?
Also, why this file contains "preferred_enctypes" parameter which I can't find in "man krb5.conf"?
And last question: would samba use system krb5.conf if I set "create krb5 conf=no"?

-- 
Vladimir Vassiliev