apereo / cas / 26587060655-1

91%

push

github

Doc spnego: replace deprecated RC4 keytab encryption with AES256

RC4-HMAC-NT encryption is deprecated and disabled by default on Windows Server 2019/2022, causing SPNEGO authentication failures.
Replace /crypto RC4-HMAC-NT with /crypto AES256-SHA1 to align with modern Active Directory security policies.
Updated the sample ktpass output accordingly to reflect AES256 key size (32 bytes) and etype 0x12.

14339 of 19547 branches covered (73.36%)

Branch coverage included in aggregate %.

82674 of 86541 relevant lines covered (95.53%)

37.72 hits per line