gssd regression, "Program lacks support for encryption type"
Bug #512110 reported by
Jochen
This bug affects 18 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
krb5 (Ubuntu) |
Confirmed
|
Medium
|
Unassigned | ||
Bug Description
After upgrading the krb5 libraries to 1.8 I could not mount my Kerberized NFS4 shares. The following error Message is in the syslog for every mount attempt:
rpc.gssd[1298]: rpcsec_gss: gss_init_
on - (minor) Program lacks support for encryption type
Switching back to 1.7 fixes this Problem.
description: | updated |
Changed in krb5 (Ubuntu): | |
importance: | Undecided → Medium |
status: | New → Confirmed |
tags: | added: glucid |
To post a comment you must log in.
Jochen <email address hidden> writes:
> After upgrading the krb5 libraries to 1.8 I could not mount my
> Kerberized NFS4 shares. The following error Message is in the syslog for
> every mount attempt:
> rpc.gssd[1298]: rpcsec_gss: gss_init_sec_context: (major) Unspecified
> GSS failure. Minor code may provide more information - (minor) Program
> lacks support for encryption type
> Switching back to 1.7 fixes this Problem.
Sounds like NFS v4 doesn't support stronger encryption types than DES.
You'll need to add:
allow_weak_crypto = true
to the [libdefaults] section of your krb5.conf file.
[...]www.eyrie.org/~eagle/ >
--
Russ Allbery (<email address hidden>) <http://