Re: ANNOUNCE: nfs-utils-1.2.2 released.

Kevin Coffman
2010-03-08T19:21:59Z

2010/3/8 Lukas Hejtmanek <xhejtman@ics.muni.cz>:
> On Mon, Mar 08, 2010 at 08:44:07AM -0500, Kevin Coffman wrote:
>> I don't know how much testing has been done with nfs-utils and krb5
>> 1.8. =A0Debian is usually the first to hit (and correct) any problem=
s.
>> Is there a later kerberos release you could try? =A0The final versio=
n of
>> krb5 1.8 was released last week.
>
> looks like some error check has been removed since nfs-utils 1.2.0. r=
pc.gssd
> from nfs-utils 1.2.0 complains with:
>
> Mar =A08 16:28:20 anubis rpc.gssd[1982]: rpcsec_gss: gss_init_sec_con=
text:
> (major) Unspecified GSS failure. =A0Minor code may provide more infor=
mation
> - (minor) No supported encryption types (config file error?)
>
> rpc.gssd from 1.2.2 segfaults.

Are you aware that DES is disabled by default with krb5 1.8? See
http://www.mit.edu/~kerberos/krb5-1.8/

So you probably need to add "allow_weak_crypto =3D true" to your
/etc/krb5.conf file. (I believe MIT added an API to allow this
programmatically, but I haven't been following closely enough.)

That doesn't excuse the segfault in 1.2.2 though.

K.C.