Bug#622146: nfs-common: compatibility between squeeze and sid broken
On Tue, Jun 07, 2011 at 01:10:23PM -0400, Sam Hartman wrote:
> >>>>> "Luk" == Luk Claes <luk@debian.org> writes:
>
> Luk> On 06/06/2011 05:37 PM, Alberto Gonzalez Iniesta wrote:
> >> Adding the following line in the [libdefaults] section of
> >> /etc/krb5.conf fixed the problem for me (tm), probably not the
> >> best solution, but works: permitted_enctypes = des-cbc-md5
>
> Luk> It's probably better to set enable_weak_crypto=yes, does that
> Luk> work?
>
> Hi.
> I think I gave Luk the wrong setting.
> It's allow_weak_crypto = yes not enable_weak_crypto = yes.
>
> You should not have to set permitted_enctypes.
> Enabling weak_crypto and only setting the des-cbc-crc key with ktadd in
> kadmin is supposed to be sufficient.
I have both set:
allow_weak_crypto=true
permitted_enctypes = des-cbc-md5
And only the... wait I have des-cbc-md5 IIRC, not des-cbc-crc. I'll
check that tomorrow.
But it's not working after the last upgrade. When I posted yesterday I
was running a sid versión from a couple of weeks ago. Probably 1.9,
sorry can't remember now.
Regards,
Alberto
--
Alberto Gonzalez Iniesta | Formación, consultoría y soporte técnico
agi@(inittab.org|debian.org)| en GNU/Linux y software libre
Encrypted mail preferred | http://inittab.com
Key fingerprint = 9782 04E7 2B75 405C F5E9 0C81 C514 AF8E 4BA4 01C3
Reply to: