On Wed, 2013-06-12 at 11:11 -0400, Steve Thompson wrote:> Samba4 4.0.5, CentOS 6.4.
>
> How does one enable DES enctypes in Samba? I need these to be available
> for each user when they log in to enable access to a Kerberized NFSv4
> export.
These should work without the DES enctypes, but if you really need them
they can be forced per-principal with a user account flag on
userAccountControl
UF_USE_DES_KEY_ONLY 0x00200000 (convert to decimal and or into the other
userAccountControl values for the principal involved).
But DES kerberos is quite weak these days, so please try and use a
modern cryptosystem, because it's more than a decade since
arcfour-hmac-md5 was introduced.
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org