arcfour-hmac encryption type used for authentication is obsolet

[Phi2ca]

Hello

Since I updated Ubuntu last night, I've been getting this message
Warning: the arcfour-hmac encryption type used for authentication is obsolete and will be disabled.

I know I need to disable/uninstall arc4 from my active directory servers, but is there anything special I need to do for my ubuntu and debian workstations that are connected to the domain via your script?

I've seen that abruptly deactivating arc4 causes a lot of problems on client workstations, so I'd rather ask for advice before embarking on this operation.

Thanks in advance for your advice and your procedure to follow if you have one.

[PierreGode]

Hi I will investigate this a bit when I get back from vacation. But what i understand you should update /etc/krb5.conf on your clients with,
[libdefaults]
default_tgs_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
default_tkt_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96
permitted_enctypes = aes256-cts-hmac-sha1-96 aes128-cts-hmac-sha1-96

[PierreGode]

@Phi2ca I added that to Reauthenticate. Now, running Reauthenticate updates packages and supports arcfour-hmac removal on servers.

[Phi2ca]

Thank you for everything