[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#611468: release-notes: updating to squeeze requires manual configuration for kerberized nfs

Package: release-notes
Severity: important

As noted in bug #568771 and /usr/share/doc/libkrb5-3/NEWS.Debian.gz,
weak cryptos are disabled by default but necessary for kerberized NFS.

I just upgraded an entire network of 10 machines to squeeze, and on all
machines (NFS server, NFS clients, KDC), it was necessary to add
"allow_weak_crypto=true" to the [libdefaults] section in /etc/krb5.conf.

I think the issue is important enough to warrant a note in the release
docs since mounting a kerberized NFS share will fail with unhelpful
error messages until the above fix has been done on all machines.

David Härdeman

Reply to: