[SSSD-users] Guidance on setting ideal enctypes?

[Kodiak Firesmith]

Hi Folks,

I'm nominally aware that the ability for adcli joins to honor custom enctypes became a
thing around 2018, but I'm having a heck of a time finding guidance online for setting
permitted enctypes so that keytabs don't create keys for DES and RC4.

Our environment uses a mixture of SSSD 2.2.3, and 2.6.3, joining to MS Active Directory,
which my Windows admins have said run MS Server 2019 with Active Directory 2016.

I've been digging around on search engines and picking through various krb5 docs, and
I think SSSD will refer to krb5.conf, and might be reading supported_enctypes or
permitted_enctypes, but I'm not sure how to put it all together.

Thanks very much!
- Kodiak Firesmith

Sent with [Proton Mail](https://proton.me/) secure email.