[Samba] How to disable des and rc4 in the active directory domain controller ?

[Dongsheng Song]

Hi,

When I run 'samba-tool domain exportkeytab', I found the exported
keytab file include arcfour-hmac-md5, aes256-cts-hmac-sha1-96,
aes128-cts-hmac-sha1-96, des-cbc-md5, and des-cbc-crc. It seems that
modify /etc/krb5.conf no help.

My DC running with samba 4.1.13, and the server role is active
directory domain controller.

Thanks,
Dongsheng