Bug 16021 - dbcheck does not check for AES128/256 kerberos supplemental credential on krbtgt account
Summary: dbcheck does not check for AES128/256 kerberos supplemental credential on krb...
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: AD: LDB/DSDB/SAMDB (show other bugs)
Version: 4.24.0rc*
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Samba QA Contact
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-03-10 16:00 UTC by Denis Cardon
Modified: 2026-03-11 13:02 UTC (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Denis Cardon 2026-03-10 16:00:10 UTC 
When dealing with domain coming from win2k3 good old days, krbtgt account is missing the AES128/256 kerberos supplemental credential.

It is not common, but it is not the first thing one will search for when having kerberos auth issues. Having dbcheck to check for this would help :-)