[35893] in Kerberos
Re: Transferring NFSv4 nfs/ keys from KDC to client?
daemon@ATHENA.MIT.EDU (Wendy Lin)
Thu Mar 20 08:07:53 2014
MIME-Version: 1.0
In-Reply-To: <1395309837.1415.10.camel@hh16.hh3.site>
Date: Thu, 20 Mar 2014 13:05:23 +0100
Message-ID: <CA+j=ERozC0OzCC16-5Kso4HdXx0pL1LP+MyAcHwZmHCFKaf55w@mail.gmail.com>
From: Wendy Lin <wendlin1974@gmail.com>
To: steve <steve@steve-ss.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 20 March 2014 11:03, steve <steve@steve-ss.com> wrote:
> On Thu, 2014-03-20 at 00:52 +0100, Wendy Lin wrote:
>>
>> I tried permitted_enctypes = "des-cbc-crc des3-cbc-sha1" but this only
>> gives me a new kind of (its mocking me?!) error message in
>> /var/log/messages on the server:
>>
>> rpc.svcgssd[6967]: qword_eol: fflush failed: errno 38 (Function not implemented)
>>
>> Wendy
>
> Hi again
> Looks like it may be fighting a kernel problem. The server needs 2.6.38
> or better:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622146
> You also need a recent kernel server. What do you have on 11.3?
Linux test1 2.6.34.10-0.6-desktop #1 SMP PREEMPT 2011-12-13 18:27:38
+0100 x86_64 x86_64 x86_64 GNU/Linux
There are kernels-of-the-day builds from Suse, but 11.3 is so old that
I do not know where they put this stuff to.
> With 13.1, we're using arcfour-hmac-md5 throughout the mount process. Is
> there any chance you can upgrade?
Doable, but it will take months to migrate. What do not understand is
that no one, say Linus or friends, *test* their stuff it it is really
interoperable with the rest of the world. It hurts, badly.
Wendy
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
