Sam Hartman <hartm...@debian.org> writes: > Paul, letting us know that it works against a lenny server but not a > sid server is very interesting. That probably means that the etype > negotiation support introduced in 1.7 is not quite doing the right > thing. > > Things to check: > [I'm not saying you should check these; this is mostly for Kerberos people > including myself to look at. > In particular I may not be giving enough detail here for someone not familiar > with Kerberos and NFS internals. > It will be a few days before I can go through this myself] > > * Confirm that both the lenny and sid kernels only support DES. > * If sid kernel supports more than DES, it may be a config issue on the > server side.
I should point my sid box is not running a kernel from sid but rather my own builds. I've observed the problem with 2.6.29.2 and 2.6.30-rc5+. I gave the current sid 2.6.29 a shot but alas it doesn't support my goofy Apple keyboard, so I can't type in my LUKS passphrase, and I don't have any normal keyboards to hand. I think I've seen 2.6.30-pre builds from the Debian kernel team linked somewhere, so I'll track those down and try one in case the problem has something to do with how my kernel is configured. > * Confirm that the client is setting the allowed gss enctypes > * walk through that code path and see what breaks. -- Paul Collins Wellington, New Zealand Dag vijandelijk luchtschip de huismeester is dood -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
