On 5/6/21 9:44 AM, Jeremy Monnet wrote:
> I have now  (DEPRECATED:arcfour-hmac) in the keytab, and
> authentication works after rejoining the AD !

RC4 is deprecated for very good reasons.

You should rather try to set attribute msDs-supportedEncryptionTypes in
the service / host entry to enable using AES-256.

Ciao, Michael.
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-users@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to