From aac22d9ebaba854daf56b8d75a1534375a3bb408 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Fri, 13 Sep 2024 22:00:06 +0200 Subject: [PATCH] s3:passdb: ENCTYPE_DES_CBC_MD5 is not longer used in secrets_domain_info_kerberos_keys() Signed-off-by: Stefan Metzmacher Reviewed-by: Andreas Schneider Autobuild-User(master): Stefan Metzmacher Autobuild-Date(master): Mon Sep 30 17:03:55 UTC 2024 on atb-devel-224 --- source3/passdb/machine_account_secrets.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/source3/passdb/machine_account_secrets.c b/source3/passdb/machine_account_secrets.c index 21571349004..0679535f026 100644 --- a/source3/passdb/machine_account_secrets.c +++ b/source3/passdb/machine_account_secrets.c @@ -1037,7 +1037,7 @@ static int secrets_domain_info_kerberos_keys(struct secrets_domain_info1_passwor bool ok; #endif /* HAVE_ADS */ DATA_BLOB arc4_b = data_blob_null; - const uint16_t max_keys = 4; + const uint16_t max_keys = 3; struct secrets_domain_info1_kerberos_key *keys = NULL; uint16_t idx = 0; char *salt_data = NULL; @@ -1047,10 +1047,10 @@ static int secrets_domain_info_kerberos_keys(struct secrets_domain_info1_passwor * ENCTYPE_AES256_CTS_HMAC_SHA1_96 * ENCTYPE_AES128_CTS_HMAC_SHA1_96 * ENCTYPE_ARCFOUR_HMAC - * ENCTYPE_DES_CBC_MD5 * * We don't include ENCTYPE_DES_CBC_CRC - * as W2008R2 also doesn't store it anymore. + * and ENCTYPE_DES_CBC_MD5 + * as they are no longer supported. * * Note we store all enctypes we support, * including the weak encryption types, -- 2.47.3