mirror of
https://github.com/RedTeamPentesting/adauth
synced 2026-06-08 12:20:46 +00:00
Allow AES128 and RC tickets to support older domains
This commit is contained in:
+6
-2
@@ -191,11 +191,15 @@ func (c *Credential) KerberosConfig(ctx context.Context) (*config.Config, error)
|
||||
krbConf.LibDefaults.PermittedEnctypeIDs = []int32{etypeID.AES256_CTS_HMAC_SHA1_96}
|
||||
krbConf.LibDefaults.PreferredPreauthTypes = []int{int(etypeID.RC4_HMAC)}
|
||||
} else {
|
||||
krbConf.LibDefaults.DefaultTGSEnctypeIDs = []int32{etypeID.AES256_CTS_HMAC_SHA1_96}
|
||||
krbConf.LibDefaults.DefaultTGSEnctypeIDs = []int32{
|
||||
etypeID.AES256_CTS_HMAC_SHA1_96, etypeID.AES128_CTS_HMAC_SHA1_96, etypeID.RC4_HMAC,
|
||||
}
|
||||
krbConf.LibDefaults.DefaultTktEnctypeIDs = []int32{
|
||||
etypeID.AES256_CTS_HMAC_SHA1_96, etypeID.AES128_CTS_HMAC_SHA1_96, etypeID.RC4_HMAC,
|
||||
}
|
||||
krbConf.LibDefaults.PermittedEnctypeIDs = []int32{etypeID.AES256_CTS_HMAC_SHA1_96}
|
||||
krbConf.LibDefaults.PermittedEnctypeIDs = []int32{
|
||||
etypeID.AES256_CTS_HMAC_SHA1_96, etypeID.AES128_CTS_HMAC_SHA1_96, etypeID.RC4_HMAC,
|
||||
}
|
||||
krbConf.LibDefaults.PreferredPreauthTypes = []int{
|
||||
int(etypeID.AES256_CTS_HMAC_SHA1_96), int(etypeID.AES128_CTS_HMAC_SHA1_96), int(etypeID.RC4_HMAC),
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user