"Kramarenko A. Maxim" <mc-si...@ya.ru> writes: > root@debian:~# klist -e /tmp/krb5cc_machine_SAG.LOCAL > Ticket cache: FILE:/tmp/krb5cc_machine_SAG.LOCAL > Default principal: nfs/debian.sag.local@SAG.LOCAL
> Valid starting Expires Service principal > 11/15/11 11:07:25 11/15/11 21:07:28 krbtgt/SAG.LOCAL@SAG.LOCAL > renew until 11/16/11 11:07:25, Etype (skey, tkt): arcfour-hmac, > arcfour-hmac > 11/15/11 11:07:28 11/15/11 21:07:28 nfs/archiv.sag.local@SAG.LOCAL > renew until 11/16/11 11:07:25, Etype (skey, tkt): arcfour-hmac, > arcfour-hmac Okay, well, so much for that theory. I was hoping that for some reason you were getting service tickets that weren't arcfour-hmac for some reason, but you are, so I don't get why they wouldn't match. > Nov 15 11:07:28 archiv rpc.svcgssd[2089]: ERROR: GSS-API: error in > handle_nullreq: gss_accept_sec_context(): GSS_S_FAILURE (Unspecified GSS > failure. Minor code may provide more information) - No supported > encryption types (config file error?) The only thing that I can think of at this point is that the underlying GSS-API implementation behind rpc.svcgssd isn't supporting arcfour-hmac for some reason. Maybe you don't have the backported version of everything and your daemon still only supports DES somehow? -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/> -- To UNSUBSCRIBE, email to debian-kernel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/87bosd3l7i....@windlord.stanford.edu
