Bug 15998 - Backport domain default AES encryption types to 4.24
Summary: Backport domain default AES encryption types to 4.24
Status: RESOLVED FIXED
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.24.0rc*
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Samba release manager
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-02-11 04:03 UTC by Douglas Bagnall
Modified: 2026-02-23 20:07 UTC (History)
3 users (show)

See Also:

Attachments
Patch for Samba 4.24 (27.23 KB, patch)
2026-02-18 04:13 UTC, Jennifer Sutton 		dbagnall: review+
Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Douglas Bagnall 2026-02-11 04:03:13 UTC 
Microsoft are making AES encryption the default (removing RC4) in April.

We might as well do this too.

This is to backport https://gitlab.com/samba-team/samba/-/merge_requests/4400 if we see fit.
Comment 1 Samba QA Contact 2026-02-18 01:53:03 UTC 
This bug was referenced in samba master:

5849c0c32810af1a10287afd02b990dde0f351d6
dc9f690b3810e8c965a0602c8a25a1e83129702c
802649fa35ed37de69f6ca0593a39399575ac6e4
Comment 2 Jennifer Sutton 2026-02-18 04:13:45 UTC 
Created attachment 18851 [details]
Patch for Samba 4.24
Comment 3 Douglas Bagnall 2026-02-18 04:36:29 UTC 
It seems good to me to get this in 4.24, even though it varies from release policy.

I am interested in opinions.
Comment 4 Björn Jacke 2026-02-18 13:05:04 UTC 
I've pushed it to 4.24 already, it's just not there yet due to flaky tests, closing it here anyway.
Comment 5 Samba QA Contact 2026-02-23 15:21:52 UTC 
This bug was referenced in samba v4-24-test:

fd5d2631ce2730cf7c83f109a3b2c60fc3e30cf6
f411cb87507f063e815d404b5e1c854fea7a61c8
0ba5ab0e2ed3d1876c0e9629871c41608e55f45c
Comment 6 Samba QA Contact 2026-02-23 20:07:44 UTC 
This bug was referenced in samba v4-24-stable (Release samba-4.24.0rc3):

fd5d2631ce2730cf7c83f109a3b2c60fc3e30cf6
f411cb87507f063e815d404b5e1c854fea7a61c8
0ba5ab0e2ed3d1876c0e9629871c41608e55f45c