Bug#611468: release-notes: updating to squeeze requires manual configuration for kerberized nfs
Package: release-notes
Severity: important
As noted in bug #568771 and /usr/share/doc/libkrb5-3/NEWS.Debian.gz,
weak cryptos are disabled by default but necessary for kerberized NFS.
I just upgraded an entire network of 10 machines to squeeze, and on all
machines (NFS server, NFS clients, KDC), it was necessary to add
"allow_weak_crypto=true" to the [libdefaults] section in /etc/krb5.conf.
I think the issue is important enough to warrant a note in the release
docs since mounting a kerberized NFS share will fail with unhelpful
error messages until the above fix has been done on all machines.
--
David Härdeman
Reply to: