On Monday, November 17th, 2025 at 6:41 AM, Chuck Lever <[email protected]> wrote:
> > Is this gssd mishandling some setup/initialization? > > Or is there a miscalculation happening somewhere further up? > > Does Debian's user space Kerberos support the sha2 enctypes? Appears to. MIT Kerberos docs list sha2 enctypes support on releases >=1.15 . Debian 13 and Fedora 43 are both shipping 1.21.3 . Debian unstable currently has 1.22.1 . I haven't had any issues managing sha2 keytabs, tickets, etc. with the userspace tools. And at least some NFS operations other than READDIR do seem to work, though I haven't tested that beyond observing cat, stat, and touch are functional. TWR
