[Samba] Samba4 DES enctypes

[Andrew Bartlett]

On Wed, 2013-06-12 at 11:11 -0400, Steve Thompson wrote:
> Samba4 4.0.5, CentOS 6.4.
> 
> How does one enable DES enctypes in Samba? I need these to be available 
> for each user when they log in to enable access to a Kerberized NFSv4 
> export.

These should work without the DES enctypes, but if you really need them
they can be forced per-principal with a user account flag on
userAccountControl

UF_USE_DES_KEY_ONLY 0x00200000 (convert to decimal and or into the other
userAccountControl values for the principal involved). 

But DES kerberos is quite weak these days, so please try and use a
modern cryptosystem, because it's more than a decade since
arcfour-hmac-md5 was introduced. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org