From 94637e5fe4724261f1cd5f48d8641e82f4b776ae Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Mon, 28 Jun 2010 23:14:23 +1000 Subject: s4:provision Add an msDS-SupportedEncryptionTypes entry to our DC This ensures that our DC will use all the available encyption types. (The KDC reads this entry to determine what the server supports) Andrew Bartlett --- source4/auth/kerberos/kerberos.h | 3 +++ 1 file changed, 3 insertions(+) (limited to 'source4/auth/kerberos/kerberos.h') diff --git a/source4/auth/kerberos/kerberos.h b/source4/auth/kerberos/kerberos.h index 96c11a4ce1..7e3a7865d6 100644 --- a/source4/auth/kerberos/kerberos.h +++ b/source4/auth/kerberos/kerberos.h @@ -53,6 +53,9 @@ struct keytab_container { #define KRB5_KEY_DATA(k) ((k)->contents) #endif /* HAVE_KRB5_KEYBLOCK_KEYVALUE */ +#define ENC_ALL_TYPES (ENC_CRC32 | ENC_RSA_MD5 | ENC_RC4_HMAC_MD5 | \ + ENC_HMAC_SHA1_96_AES128 | ENC_HMAC_SHA1_96_AES256) + #ifndef HAVE_KRB5_SET_REAL_TIME krb5_error_code krb5_set_real_time(krb5_context context, int32_t seconds, int32_t microseconds); #endif -- cgit