Home / server / Questions / 32095
Accepted
wzzrd
Asked: 2009-06-27 02:35:37 +0800 CST

Linux in AD: Supported enctypes for Windows 2003 AD

  • 772

In the MIT Kerberos implementation that comes with most Linux distributions, I can define what encryption type I want to use for ticket requests. I am not a Windows guy, but apparently, Kerberos as a whole offers a lot of options here and Windows AD only offers a subset of these.

Does anyone know the enctypes a current Windows 2003 Enterprise domain controller would accept and provide? I don't seem to be able to find a definitive list of this.

Update: I have been able distill that Windows does not support 3DES. And even though MS TechNet says Unix clients generally do not support RC4, even my RHEL3 clients do so nicely.

linux windows-server-2003 active-directory encryption kerberos

2 Answers

  1. Best Answer

    From technet : Logon and authentication

    Encryption Algorithm Key Length

    RC4-HMAC 128

    DES-CBC-CRC 56

    DES-CBC-MD5 56

    This isn't specifically about the ticket requests, however I suppose these are the algorithms used for these too.

    • 2

  2. Wazoox is correct. Default I believe is using MD5.

    • 1