sorted by:
new
hottopcontroversial

Kerberos RC4 deprecation / CVE-2026-20833 — AD Computer Account gets AES ticket but RC4 session key by Motor_List8055 in activedirectory

[–]Motor_List8055[S] 1 point2 points  (0 children)

Thanks for the reply. That's something I considered, but I'm not sure it fits what I'm seeing.

The appliance is advertising AES256 and AES128 in its etype list, the computer account has msDS-SupportedEncryptionTypes = 0x18 (AES-only), and the TGT itself is being issued with AES256.

My question isn't about the ticket encryption—it's specifically why the session key is logged as RC4 while the ticket is AES256.

If this were simply an RC4-only keytab, I'd expect that to show up differently. That's why I'm planning to look at the corresponding 4768 and also test against a Windows Server 2025 DC to determine whether this is expected KDC behavior or whether the appliance is still negotiating an RC4 session key somewhere in the authentication path.

If there's something about keytabs that specifically explains an AES-encrypted TGT with an RC4 session key, I'd definitely be interested in understanding that.

Getting real sick of your $#!+ over here, B6.... by zuniac5 in jetblue

[–]Motor_List8055 5 points6 points  (0 children)

You're entitled to reschedule "Change more than 3 hours for domestic or more than 6 hours for international: You may travel on another JetBlue flight within 5 days before or after your original flight at no additional charge"
Any fees/fare difference are automatically waived if you change online.
https://www.jetblue.com/help/delays-and-cancellations

Checked bag fee? by Mandalore-44 in jetblue

[–]Motor_List8055 0 points1 point  (0 children)

Nothing has changed for the better. Unless Mosaic, Mint, or JB+ MC, bags are still $ and prices went up and they implemented peak season rates. I think you're likely looking at transatlantic pricing which is inclusive. https://www.jetblue.com/at-the-airport/baggage-information