Bug#637660: nfs-kernel-server: gss_accept_sec_context failed - Encryption type not permitted

[Bastian Blank <waldi@debian.org>]

On Sun, Aug 14, 2011 at 12:43:14AM +1000, ganomi wrote:

Please get a name.

> maverick:~# klist -ke /etc/krb5.keytab
> Keytab name: WRFILE:/etc/krb5.keytab
> KVNO Principal
> ---- --------------------------------------------------------------------------
>    4 nfs/maverick.firm.local@FIRM.LOCAL (des3-cbc-sha1)
>    4 nfs/maverick.firm.local@FIRM.LOCAL (des-cbc-crc)

Please setup standard encryption types.

> root@knightrider:~# klist -ke /etc/krb5.keytab
> Keytab name: WRFILE:/etc/krb5.keytab
> KVNO Principal
> ---- --------------------------------------------------------------------------
>    6 nfs/knightrider.firm.local@FIRM.LOCAL (des-cbc-crc)

DES is disabled in the meantime. Use other encryption types.

> ERROR: GSS-API: error in handle_nullreq: gss_accept_sec_context():
> GSS_S_FAILURE (Unspecified GSS failure.  Minor code may provide more
> information) - Encryption type not permitted

I hope this message is clear.

Bastian

-- 
	"Get back to your stations!"
	"We're beaming down to the planet, sir."
		-- Kirk and Mr. Leslie, "This Side of Paradise",
		   stardate 3417.3