s3:libads: Remove DES legacy types for Kerberos

We already removed DES support for Kerberos in Samba 4.12.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Isaac Boukris <iboukris@samba.org>
(cherry picked from commit 9cf1aecd73e011ad03ddb072760454379b3f0a32)

diff --git a/source3/libads/kerberos.c b/source3/libads/kerberos.c
index 5959da919b039f1ba2d0892a9e77cbde695aec93..53079bbb9679f3b46a75af8b479d28fa46a37b9d 100644 (file)
--- a/source3/libads/kerberos.c
+++ b/source3/libads/kerberos.c
@@ -594,7 +594,7 @@ static char *get_enctypes(TALLOC_CTX *mem_ctx)
 
        if (lp_kerberos_encryption_types() == KERBEROS_ETYPES_ALL ||
            lp_kerberos_encryption_types() == KERBEROS_ETYPES_LEGACY) {
-               legacy_enctypes = "RC4-HMAC DES-CBC-CRC DES-CBC-MD5";
+               legacy_enctypes = "RC4-HMAC";
        }
 
        enctypes =