We have a look at "msDS-SupportedEncryptionTypes" and >= DS_DOMAIN_FUNCTION_2008
8dd3732 s4:kdc: add aes key support for trusted domains
source4/kdc/db-glue.c | 185 +++++++++++++++++++++++++++++++++++++++----------
1 file changed, 148 insertions(+), 37 deletions(-)
Upstream: gitweb.samba.org