search for: chdcpass

...Hello Mike, > > Can be you need to recreate the machine and tgt password on yout server so > it adds the aes enc types for these after raising the functional domai > level. > > The required scripts can be found in tthe samba sources in > /source4/scripting/devel/ > > Use chdcpass for the machine-account and chgkrbtgtpass for the tgt account. > > I did this on an single addc server a while back and had no issues. Never > tried it on an setup with multiple addc's. So i#d recommend you make an > backup/snapshot before you try it. > > > Achim~ > >...

Hi, I am testing Google's recent ability to integrate Chromebooks into AD and it's failing when I try to join the device to the domain. When I run wireshark during the test I notice 2 TGS-REQs from the device that are answered with KRB5KDC_ERR_ETYPE_NOSUPP. The Chromebook is only passing AES256-cts-hmac-sha1-96 and AES128-cts-hmac-sha1-96 as enc types. I was getting the same result from

Hello Mike, Can be you need to recreate the machine and tgt password on yout server so it adds the aes enc types for these after raising the functional domai level. The required scripts can be found in tthe samba sources in /source4/scripting/devel/ Use chdcpass for the machine-account and chgkrbtgtpass for the tgt account. I did this on an single addc server a while back and had no issues. Never tried it on an setup with multiple addc's. So i#d recommend you make an backup/snapshot before you try it. Achim~ Am 27.12.2017 um 16:00 schrieb Mike Fo...