[Samba] How to disable des and rc4 in the active directory domain controller ?

Dongsheng Song dongsheng.song at gmail.com
Mon Dec 22 01:34:42 MST 2014


Hi,

When I run 'samba-tool domain exportkeytab', I found the exported
keytab file include arcfour-hmac-md5, aes256-cts-hmac-sha1-96,
aes128-cts-hmac-sha1-96, des-cbc-md5, and des-cbc-crc. It seems that
modify /etc/krb5.conf no help.

My DC running with samba 4.1.13, and the server role is active
directory domain controller.

Thanks,
Dongsheng


More information about the samba mailing list