API Reference
Class
KerberosEncryptionTypeClassifier
Classifies Kerberos encryption posture from msDS-SupportedEncryptionTypes.
Inheritance
- Object
- KerberosEncryptionTypeClassifier
Methods
AllowsRc4 2 overloads
public static Boolean AllowsRc4(Nullable<Int32> encryptionTypes) #Returns:
BooleanReturns true when the effective encryption mask allows RC4.
Parameters
- encryptionTypes System.Nullable{System.Int32}
- Raw msDS-SupportedEncryptionTypes value.
public static Boolean AllowsRc4(Nullable<Int32> encryptionTypes, Nullable<Int32> defaultDomainSupportedEncTypes) #Returns:
BooleanReturns true when the effective encryption mask allows RC4.
Parameters
- encryptionTypes System.Nullable{System.Int32}
- Raw msDS-SupportedEncryptionTypes value.
- defaultDomainSupportedEncTypes System.Nullable{System.Int32}
- KDC DefaultDomainSupportedEncTypes fallback for unset account masks.
HasAes 2 overloads
public static Boolean HasAes(Nullable<Int32> encryptionTypes) #Returns:
BooleanReturns true when the effective encryption mask contains AES128 or AES256.
Parameters
- encryptionTypes System.Nullable{System.Int32}
- Raw msDS-SupportedEncryptionTypes value.
public static Boolean HasAes(Nullable<Int32> encryptionTypes, Nullable<Int32> defaultDomainSupportedEncTypes) #Returns:
BooleanReturns true when the effective encryption mask contains AES128 or AES256.
Parameters
- encryptionTypes System.Nullable{System.Int32}
- Raw msDS-SupportedEncryptionTypes value.
- defaultDomainSupportedEncTypes System.Nullable{System.Int32}
- KDC DefaultDomainSupportedEncTypes fallback for unset account masks.
IsAesDisabled 2 overloads
public static Boolean IsAesDisabled(Nullable<Int32> encryptionTypes) #Returns:
BooleanReturns true when AES is not enabled in the effective encryption mask.
Parameters
- encryptionTypes System.Nullable{System.Int32}
- Raw msDS-SupportedEncryptionTypes value.
public static Boolean IsAesDisabled(Nullable<Int32> encryptionTypes, Nullable<Int32> defaultDomainSupportedEncTypes) #Returns:
BooleanReturns true when the effective encryption mask lacks AES128 and AES256.
Parameters
- encryptionTypes System.Nullable{System.Int32}
- Raw msDS-SupportedEncryptionTypes value.
- defaultDomainSupportedEncTypes System.Nullable{System.Int32}
- KDC DefaultDomainSupportedEncTypes fallback for unset account masks.
public static Boolean IsMissing(Nullable<Int32> encryptionTypes) #Returns:
BooleanReturns true when the attribute is missing, empty, or explicitly set to the default marker value.
Parameters
- encryptionTypes System.Nullable{System.Int32}
- Raw msDS-SupportedEncryptionTypes value.
IsRc4Only 2 overloads
public static Boolean IsRc4Only(Nullable<Int32> encryptionTypes) #Returns:
BooleanReturns true when the effective mask allows RC4 but not AES.
Parameters
- encryptionTypes System.Nullable{System.Int32}
- Raw msDS-SupportedEncryptionTypes value.
public static Boolean IsRc4Only(Nullable<Int32> encryptionTypes, Nullable<Int32> defaultDomainSupportedEncTypes) #Returns:
BooleanReturns true when the effective mask allows RC4 but not AES.
Parameters
- encryptionTypes System.Nullable{System.Int32}
- Raw msDS-SupportedEncryptionTypes value.
- defaultDomainSupportedEncTypes System.Nullable{System.Int32}
- KDC DefaultDomainSupportedEncTypes fallback for unset account masks.
Inherited Methods
public override Boolean Equals(Object obj) #Returns:
BooleanInherited from Object
Parameters
- obj Object