I have sent a patch on the list to set the supportedEncryptionType attribute on the AD TDO object. This allows us to fine tune exactly which of the supported Encryption types can be used in the trust. In the patch I enabled only RC4 and AES given DES should be discontinued anyways.
FreeIPA 3.0.0 GA has been released, moving the ticket to 3.0 bugfixing release.
Fixed by
master: 2d42737 ipa-3.0: deeec46
Rename "trusts" component to "Trusts" to achieve correct sorting.
Metadata Update from @simo: - Issue assigned to simo - Issue set to the milestone: FreeIPA 3.0.1 (bug fixing)
Login to comment on this ticket.