Testing patch to enable AES in Samba3 Kerberos
Jeremy Allison
jra at samba.org
Wed Jul 15 17:58:29 MDT 2009
On Thu, Jul 16, 2009 at 08:38:10AM +1000, Andrew Bartlett wrote:
> I've been testing interop with Samba3 and AD using AES, as part of some
> interop work I was doing with Samba4's Kerberos code. I attach a patch
> (not to be applied) to help demonstrate the problem.
>
> In short, Samba3 must not blindly remove the fixed list of enc types
> without performing extensive interop to ensure it works against all
> servers.
So currently this code is preventing S3 client code
from using AES, correct ? It's pretty old code, so
we can probably work on updating it to be W2K8
compatible.
Just want to clarify the problem.
Jeremy.
More information about the samba-technical
mailing list