Bug 2126881

Summary:	AD-SUPPORT crypto policy needs to be AD-SUPPORT-LEGACY
Product:	Red Hat Enterprise Linux 9	Reporter:	jstephen
Component:	Documentation	Assignee:	Josip Vilicic <jvilicic>
Documentation sub component:	default	QA Contact:	RHEL DPM <rhel-docs>
Status:	CLOSED CURRENTRELEASE	Docs Contact:
Severity:	medium
Priority:	medium	CC:	jvilicic, rhel-docs
Version:	9.1	Keywords:	Documentation
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-10-03 15:55:50 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description jstephen 2022-09-14 16:16:09 UTC

Document URL: 
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/integrating_rhel_systems_directly_with_windows_active_directory/connecting-rhel-systems-directly-to-ad-using-sssd_integrating-rhel-systems-directly-with-active-directory#ensuring-support-for-common-encryption-types-in-ad-and-rhel_connecting-rhel-systems-directly-to-ad-using-sssd

Section Number and Name: 
1.3. Ensuring support for common encryption types in AD and RHEL

RHEL9 now includes the 'AD-SUPPORT-LEGACY' crypto profile which is used to support RC4 encryption. Please update the command to set this crypto profile policy instead of 'AD-SUPPORT'.

Comment 1 Josip Vilicic 2022-10-03 15:55:50 UTC

Thank you for filing this documentation request, Justin. We have updated the RHEL 9 documentation in 2 places:

Integrating RHEL systems directly with Windows Active Directory > 1.3. Ensuring support for common encryption types in AD and RHEL
-- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/integrating_rhel_systems_directly_with_windows_active_directory/connecting-rhel-systems-directly-to-ad-using-sssd_integrating-rhel-systems-directly-with-active-directory#ensuring-support-for-common-encryption-types-in-ad-and-rhel_connecting-rhel-systems-directly-to-ad-using-sssd

Installing trust between IdM and AD > 5. Ensuring support for common encryption types in AD and RHEL
-- https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/installing_trust_between_idm_and_ad/ensuring-support-for-common-encryption-types-in-ad-and-rhel_installing-trust-between-idm-and-ad

I'll be closing this ticket, but please let us know if you would like any changes.