| commit | a625f1bee259664db11fa67b30d68301ad1251b6 | |
| author | Stefan Metzmacher <metze@samba.org> | |
| Mon, 22 Oct 2012 11:47:48 +0000 (22 13:47 +0200) | ||
| committer | Karolin Seeger <kseeger@samba.org> | |
| Thu, 6 Dec 2012 08:40:18 +0000 (6 09:40 +0100) | ||
| tree | b5c9dcd536ee6d6f10a9e9069bb36dd4af820c69 | treesnapshot (tar.gz zip) |
| parent | 8c10d644715714d522090a254dc0a19f73e258ae | commitdiff |
lib/krb5_wrap: request enc_types in the correct order (bug #9272)
aes256-cts-hmac-sha1-96 and aes128-cts-hmac-sha1-96
should have a higher priority than arcfour-hmac-md5,
otherwise the KDC still gives us arcfour-hmac-md5 session keys.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
(similar to commit 24f3f87706329e6e280dc6be6d025e997d46c910)
The last 3 patches address bug #9272 - net ads join does not provide AES keys in
host keytab.
(cherry picked from commit 5fbedc11e685684e037d23f75f42ec234c6d08f0)
aes256-cts-hmac-sha1-96 and aes128-cts-hmac-sha1-96
should have a higher priority than arcfour-hmac-md5,
otherwise the KDC still gives us arcfour-hmac-md5 session keys.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
(similar to commit 24f3f87706329e6e280dc6be6d025e997d46c910)
The last 3 patches address bug #9272 - net ads join does not provide AES keys in
host keytab.
(cherry picked from commit 5fbedc11e685684e037d23f75f42ec234c6d08f0)
| source3/libsmb/clikrb5.c | diffblobblamehistory |