Loading...

XML

Word

Printable

Git Pull Request:
https://github.com/linux-system-roles/mssql/pull/301
Preliminary Testing:
Pass
Testable Builds:
https://kojihub.stream.rdu2.redhat.com/koji/taskinfo?taskID=4883507
Errata Link:
https://errata.engineering.redhat.com/advisory/143550
Test Coverage:

Automated

Release Note Type:
Enhancement
Release Note Text:

Hide
.The `microsoft.sql.server` system role enables AES 128-bit and AES 256-bit encryption for AD users

The `adutil` utility since its version 1.1.83 supports the Kerberos protocol with AES 128-bit and AES 256-bit encryption when creating and modifying an Active Directory (AD) user. With this update, the `microsoft.sql.server` system role automates enabling AES 128-bit and AES 256-bit encryption provided by the Kerberos protocol when creating or modifying AD users. As a result, manual post-configuration tasks are not necessary.

Show
.The `microsoft.sql.server` system role enables AES 128-bit and AES 256-bit encryption for AD users The `adutil` utility since its version 1.1.83 supports the Kerberos protocol with AES 128-bit and AES 256-bit encryption when creating and modifying an Active Directory (AD) user. With this update, the `microsoft.sql.server` system role automates enabling AES 128-bit and AES 256-bit encryption provided by the Kerberos protocol when creating or modifying AD users. As a result, manual post-configuration tasks are not necessary.
Release Note Status:
In Progress

Enhancement: Use new adutil functionality to enable AES encryption

Reason: Since adutil version 1.1.83, adutil supports enabling Kerberos AES 128 and AES 256 bit encryption when creating and modifying the user.

Result: The role automates enabling Kerberos AES 128 and AES 256 bit encryption, so the manual post-configuration task is not required.

is cloned by

RHEL-68490 mssql: Use new adutil functionality to enable AES encryption [el10]

links to

RHEA-2024:143550 ansible-collection-microsoft-sql bug fix and enhancement update