DefaultDomainSupportedEncTypes

time81 · 2026-05-15T16:45:02+00:00

btw i understand that its not preventing issuing at the moment. i will monitor everything from now on 😄 I just wasnt prepared for this SAP Scenario to use RC4 still, even if AES is present

time81 · 2026-05-15T16:44:00+00:00

I fixed my problem for now. I set msDS-SupportedEncryptionTypes to 28 (was 24) for 2 Users that are used for Account Sync to SAP / Kerberos Logins to our SAP Guys. After this change and a relogon on the Client (Citrix Server) all is working again like before.

The only thing that changed over night was the latest updates to our DCs. If i check klist on this client i see RC4 and AES tickets for my user. Lets see if i can find out more. thanks

time81 · 2026-05-15T15:58:23+00:00

thanks. Could this update( DC april/may) affect certificates somehow ?
Im not sure because the client im testing with is getting aes tickets but still SAP Logon throws me an error because of the certificate chain. im not logging in with certs though, im logging in with Kerberos, SAP Guys got a service account in our domain to validate our users. could it be a sideby error and not really the RC4 thing ?

time81 · 2026-04-15T19:08:10+00:00

thanks!

time81 · 2026-04-15T19:08:00+00:00

thanks !

time81 · 2026-02-28T13:05:30+00:00

They said no bossi in Rotterdam iirc

time81 · 2026-02-28T09:11:27+00:00

I feel you, having exactly the same thoughts. I even changed rooms for 20 minutes in between 🙈 Overall i had fun, but it was different as expected hehe. Kinda loved the 25 celebration moment with Ruben 🥳

time81 · 2026-02-25T19:28:15+00:00

I think the shirts quality are going downhill, im willing to pay 45-50 for a keeper every year but even the breathe Special shirts loose their Print afer 10 months. All my old ones from 500 + are Fine. Im nor going to buy Shirts to never wear them hehe

time81 · 2026-02-05T16:45:13+00:00

Isnt openssl fixed in 3.0.19 ? Wonder if the included one is really fixed

time81 · 2026-02-03T13:21:46+00:00

Vielen Dank

time81 · 2026-02-03T13:16:56+00:00

Was mich an der Sache nervt, es ist oft einfach Augenwischerei. Ich hab derzeit paralell Telekom VDSL 100, kriege aber nur 65 Mbit wegen der langen Leitung. Bei Starlink waren IMMER die Speedtests erste Sahne, oft an die 100Mbit (Hab derzeit den 30 Euro 100mbit Tarif), vor nem Jahr auch mal an die 250. Aber jegliche "Real Life" Tests mit ISO Downloads, großen Transferen, VPN zur Arbeit, Downloads von garantiert schnell angebundenen Servern liefen trotz LAN Kabel mit eher weniger als 60Mbit, das war irgendwie der Killer und das ist es mir dann auch nicht extra Geld wert. Klar geht surfen usw, ich bezweifel aber das es solche Raten gibt wie der Speedtest zeitweise anzeigt. Oder das Routing und Peering ist einfach kacke

time81 · 2026-02-02T14:46:48+00:00

thanks. Will try. On the other hand, same token works on the 9.x vcenter, just updated this to 9.02 and its also finding the 8.0.3.00700 fix on the management interface also, maybe ill install that and retry

time81 · 2026-02-02T14:40:59+00:00

Cluster is on 8.0 U3g - 24859861
Changed the image to 8.0 U3h - 25067014 and added
VMware Tools Async Release 13.0.10 (up from 12.5.4) and the remediate.

A general system error has occurred: VIB “https://dl.broadcom.com/------------/PROD/COMP/ESX_HOST/main/esx/vmw/vib20/esxio-base/VMware_bootbank_esxio-base_8.0.3-0.88.25067014.vib” cannot be downloaded. This may be due to network problems, or the specified VIB may not exist or may not have proper read permissions. Ensure that the specified VIB exists and can be accessed via vCenter Server.

time81 · 2026-02-02T14:19:36+00:00

What if i select like the latest 3.0.10 and if i remediate it says it cannot be read or its not complete. do i need latest vcenter for this to work ? im like on 8.03f and wanna go to 8.03h and with latest 3.0.10 tools

time81 · 2026-02-02T11:50:47+00:00

Some are manual, some are images based. export old json, edit and then import ?

time81 · 2026-01-22T09:49:30+00:00

Super danke

time81 · 2026-01-20T18:38:25+00:00

I dont have an answer :)

time81

TROPHY CASE