From 03a27a2599d9b8e7fd9ed38a9f47277c49575968 Mon Sep 17 00:00:00 2001 From: Alexander Bokovoy Date: Sun, 27 Oct 2019 13:31:38 +0200 Subject: [PATCH] Fix deployment of Samba AD DC with MIT Kerberos When DES encryption is not supported in MIT Kerberos, deployment of Samba AD DC fails with "ERROR(ldb): uncaught exception - setup_kerberos_keys: generation of a des-cbc-md5 key failed: Bad encryption type" Fix it by not using DES encryption types in MIT build. Resolves #1757071 --- samba.spec | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/samba.spec b/samba.spec index 5d8bacc..ea0bc79 100644 --- a/samba.spec +++ b/samba.spec @@ -6,7 +6,7 @@ # ctdb is enabled by default, you can disable it with: --without clustering %bcond_without clustering -%define main_release 0 +%define main_release 1 %define samba_version 4.11.1 %define talloc_version 2.2.0 @@ -3466,6 +3466,9 @@ fi %endif # with_clustering_support %changelog +* Sun Oct 27 2019 Alexander Bokovoy - 4.11.1-1 +- resolves: #1757071 - Deploy new samba DC fails + * Fri Oct 18 2019 Guenther Deschner - 4.11.1-0 - Update to Samba 4.11.1