Joseph Sutton 449163b21d tests/krb5: Declare supported encryption types of service account ...

If SID compression support is disabled for a created account,
msDS-SupportedEncryptionTypes will be set to a value that includes the
RESOURCE_SID_COMPRESSION_DISABLED bit, but no actual encryption type
bits. Since stricter encryption type handling was introduced to address
CVE-2022-37966, this combination has been interpreted as an expression
of no encryption type support, and trying to make a Kerberos request to
a service with such a combination of bits will fail with
ERR_ETYPE_NOSUPP.

To allow us to make Kerberos requests to test service accounts again, we
must set some actual encryption type bits.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

2023-02-08 00:03:39 +00:00

..

examples

python: Remove redundant assignments

2022-05-10 05:19:34 +00:00

samba

tests/krb5: Declare supported encryption types of service account

2023-02-08 00:03:39 +00:00

modules.c

py3: Remove PyStr_FromString() compatability macro

2019-06-24 17:24:27 +00:00

modules.h

python: Create macro to hide ugly function signature cast

2019-05-16 17:55:16 +00:00

py3compat.h

py3compat: remove obsolete comments

2021-03-17 17:10:32 +00:00

pyglue.c

python: whitespace fixes

2022-10-03 20:03:32 +00:00

wscript

python/wscript: Remove unused format() argument

2022-05-10 05:19:34 +00:00