Bug 13135 – The KDC logic arround msDs-supportedEncryptionTypes differs from Windows

Bug 13135 - The KDC logic arround msDs-supportedEncryptionTypes differs from Windows


Summary:	The KDC logic arround msDs-supportedEncryptionTypes differs from Windows

Status:	NEW

Product:	Samba 4.1 and newer
Classification:	Unclassified
Component:	AD: LDB/DSDB/SAMDB
Version:	4.7.0
Hardware:	All All

Importance:	P5 normal
Target Milestone:	---
Assigned To:	Stefan Metzmacher
QA Contact:	Samba QA Contact

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2017-11-14 15:15 UTC by Stefan Metzmacher
Modified:	2017-12-13 13:03 UTC (History)
CC List:	1 user (show)

See Also:

Attachments
Work in progress patches (14.24 KB, patch) 2017-12-13 13:03 UTC, Stefan Metzmacher	no flags	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Stefan Metzmacher 2017-11-14 15:15:01 UTC

It seems this attribute is only evaluated for objects with objectClass=computer
and not for normal accounts.

The presence of a supported encryption type should also have some meaning if
a key for that type is not yet stored in the database.

But the KDC should notice support for new encryption types and use
that for session keys.

Comment 1 Stefan Metzmacher 2017-12-13 13:03:06 UTC

Created attachment 13866 [details]
Work in progress patches