Bug#622146: nfs-common: compatibility between squeeze and sid broken

[Sam Hartman <hartmans@debian.org>]

>>>>> "Luk" == Luk Claes <luk@debian.org> writes:

    Luk> On 06/06/2011 05:37 PM, Alberto Gonzalez Iniesta wrote:
    >> Adding the following line in the [libdefaults] section of
    >> /etc/krb5.conf fixed the problem for me (tm), probably not the
    >> best solution, but works: permitted_enctypes = des-cbc-md5

    Luk> It's probably better to set enable_weak_crypto=yes, does that
    Luk> work?

Hi.
I think I gave Luk the wrong setting.
It's allow_weak_crypto = yes not enable_weak_crypto = yes.

You should not have to set permitted_enctypes.
Enabling weak_crypto and only setting the des-cbc-crc key with ktadd in
kadmin is supposed to be sufficient.

--Sam