https://www.haguest.com/tags/adfs/Recent content in Adfs on Cliff HultsHugo -- gohugo.ioen© 2026 Cliff HultsFri, 20 Nov 2020 18:10:12 -0500https://www.haguest.com/posts/2020-11-20-adfs-cve-2020-17049/Fri, 20 Nov 2020 18:10:12 -0500https://www.haguest.com/posts/2020-11-20-adfs-cve-2020-17049/<p>Microsoft recently performed a patch for Kerberos and the KDC service on domain controllers. This would patch a heavy vulnerability in the Kerberos signing structure. However, this presented a problem with our domain joined NAS appliance, and disallowed any users from authenticating to SMB shares. In order to alleviate ourselves of the issue, we followed the instructions to disable the following registry key within <code>HKLM\SYSTEM\CurrentControlSet\Services\Kdc\</code> by adding <code>PerformTicketSignature</code> set to <code>DWORD 0</code>.</p>