diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2010-11-16 21:01:22 +1100 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2010-11-16 21:24:43 +0000 |
| commit | deed2a935b0ebd615929e21ec423204d44ada067 (patch) | |
| tree | c38b4dfca605607d91b36abff53a5ec8768af220 /nsswitch | |
| parent | d451ac1f3ac7b391e3cb28dca8e665bf1e1beddd (diff) | |
| download | samba-deed2a935b0ebd615929e21ec423204d44ada067.tar.gz samba-deed2a935b0ebd615929e21ec423204d44ada067.tar.bz2 samba-deed2a935b0ebd615929e21ec423204d44ada067.zip | |
s4-kdc Rework supported encryption type logic to match Microsoft
Thanks to Hongwei Sun for the clear description of the algorithim
involved. Importantly, it isn't possible to remove encryption types
from the list, only to add them over the defaults (DES and
arcfour-hmac-md5, and additional AES for DCs and RODCs).
This changes the behaviour for entries with
msDS-supportedEncryptionTypes: 0, which Angelos Oikonomopoulos
reported finding set by ADUC when attempting to store cleartext
passwords.
Andrew Bartlett
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Nov 16 21:24:43 UTC 2010 on sn-devel-104
Diffstat (limited to 'nsswitch')
0 files changed, 0 insertions, 0 deletions