From 0efc6d4556c7ce1169dc8f38561de9cdfb6d3ee2 Mon Sep 17 00:00:00 2001
From: Alexander Bokovoy <abokovoy@redhat.com>
Date: Oct 27 2019 11:42:45 +0000
Subject: Fix deployment of Samba AD DC with MIT Kerberos


When DES encryption is not supported in MIT Kerberos, deployment of
Samba AD DC fails with

"ERROR(ldb): uncaught exception - setup_kerberos_keys: generation of a
des-cbc-md5 key failed: Bad encryption type"

Fix it by not using DES encryption types in MIT build.

Resolves #1757071

(cherry picked from commit 03a27a2599d9b8e7fd9ed38a9f47277c49575968)

---

diff --git a/samba.spec b/samba.spec
index 6c991ed..af1302c 100644
--- a/samba.spec
+++ b/samba.spec
@@ -6,7 +6,7 @@
 # ctdb is enabled by default, you can disable it with: --without clustering
 %bcond_without clustering
 
-%define main_release 0
+%define main_release 1
 
 %define samba_version 4.11.1
 %define talloc_version 2.2.0
@@ -3466,6 +3466,9 @@ fi
 %endif # with_clustering_support
 
 %changelog
+* Sun Oct 27 2019 Alexander Bokovoy <abokovoy@redhat.com> - 4.11.1-1
+- resolves: #1757071 - Deploy new samba DC fails
+
 * Fri Oct 18 2019 Guenther Deschner <gdeschner@redhat.com> - 4.11.1-0
 - Update to Samba 4.11.1