diff options
| author | Stefan Metzmacher <metze@samba.org> | 2019-11-29 13:48:24 +0100 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2020-06-04 11:47:48 +0000 |
| commit | 5015bbbd70188553454cfdbbf4faa1c2062c4882 (patch) | |
| tree | b9db60e133feb32336f8e5b3b61a89e9e36017f0 | |
| parent | 2b15eee1bc0d48b9804f20d5bb3cc8b2fde8085e (diff) | |
| download | samba-5015bbbd70188553454cfdbbf4faa1c2062c4882.tar.gz | |
s3:libads: prefer ENCTYPE_AES256_CTS_HMAC_SHA1_96 in ads_keytab_add_entry()
This is currently not critical as we only use keytabs
only as acceptor, but in future we'll also use them
for kinit() and there we should prefer the newest type.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
| -rw-r--r-- | source3/libads/kerberos_keytab.c | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/source3/libads/kerberos_keytab.c b/source3/libads/kerberos_keytab.c index 7d193e1a600..bc35d5edbe4 100644 --- a/source3/libads/kerberos_keytab.c +++ b/source3/libads/kerberos_keytab.c @@ -240,12 +240,12 @@ int ads_keytab_add_entry(ADS_STRUCT *ads, const char *srvPrinc, bool update_ads) krb5_data password; krb5_kvno kvno; krb5_enctype enctypes[6] = { -#ifdef HAVE_ENCTYPE_AES128_CTS_HMAC_SHA1_96 - ENCTYPE_AES128_CTS_HMAC_SHA1_96, -#endif #ifdef HAVE_ENCTYPE_AES256_CTS_HMAC_SHA1_96 ENCTYPE_AES256_CTS_HMAC_SHA1_96, #endif +#ifdef HAVE_ENCTYPE_AES128_CTS_HMAC_SHA1_96 + ENCTYPE_AES128_CTS_HMAC_SHA1_96, +#endif ENCTYPE_ARCFOUR_HMAC, 0 }; |