[Pkg-samba-maint] Bug#566977: samba-common-bin: 'net ads join' fails against, Windows 2003 domain with 'Program lacks support for encryption type'

[Steve Langasek]

tags 566977 confirmed upstream
thanks

On Wed, Jan 27, 2010 at 03:33:59AM -0800, Steve Langasek wrote:

> So one or more of these types is not enabled by the new 'allow_weak_crypto'
> option?

Nope, they're all supported, but Samba has a function in
source3/libads/kerberos.c named
"create_local_private_krb5_conf_for_domain"... which does exactly that, and
of course it doesn't know to set the new 'allow_weak_crypto' option.  So
this is a samba bug that needs fixed.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 828 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20100127/1c604b84/attachment.pgp>