]> git.ipfire.org Git - thirdparty/samba.git/commitdiff
s3:libads: Remove DES legacy types for Kerberos
authorAndreas Schneider <asn@samba.org>
Thu, 3 Sep 2020 09:11:14 +0000 (11:11 +0200)
committerAndreas Schneider <asn@cryptomilk.org>
Mon, 7 Sep 2020 08:03:38 +0000 (08:03 +0000)
We already removed DES support for Kerberos in Samba 4.12.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Isaac Boukris <iboukris@samba.org>
source3/libads/kerberos.c

index 3fab68266f289e87239e3fccc65551deb06687b5..ad4282c208f18300c146390719519e33b6240d9c 100644 (file)
@@ -613,7 +613,7 @@ static char *get_enctypes(TALLOC_CTX *mem_ctx)
 
        if (lp_kerberos_encryption_types() == KERBEROS_ETYPES_ALL ||
            lp_kerberos_encryption_types() == KERBEROS_ETYPES_LEGACY) {
-               legacy_enctypes = "RC4-HMAC DES-CBC-CRC DES-CBC-MD5";
+               legacy_enctypes = "RC4-HMAC";
        }
 
        enctypes =