Arno Schuring <[email protected]> писал(а) в своём письме Wed, 16 Nov 
2011 23:34:50 +0400:

Kramarenko A. Maksim ([email protected] on 2011-11-15 09:51 +0400):
Arno Schuring <[email protected]> писал(а) в своём письме Tue,
15 Nov 2011 03:30:54 +0400:

[..]
Nov 15 00:06:32 debian rpc.gssd[1730]: Success getting keytab entry
for 'nfs/[email protected]'

Seems good...

=============== ... and server: ===============

The server does not seem to accept the encryption type, or the KDC
(Windows) is rejecting the negotiation. Does the client keytab contain
multiple encryption types (klist -k -e)?
keytab contains all types of encryption supported by Win 2k8 R2:
ARCHIV ~ # klist -ke
Keytab name: WRFILE:/etc/krb5.keytab
KVNO Principal
---- --------------------------------------------------------------------------
   5 nfs/[email protected] (des-cbc-crc)
   5 nfs/[email protected] (des-cbc-md5)
   5 nfs/[email protected] (arcfour-hmac)
   5 nfs/[email protected] (aes256-cts-hmac-sha1-96)
   5 nfs/[email protected] (aes128-cts-hmac-sha1-96)

In this case, the ticket machine to have the correct encryption type when 
mounting:
ARCHIV ~ # klist -e /tmp/krb5cc_machine_SAG.LOCAL
Ticket cache: FILE:/tmp/krb5cc_machine_SAG.LOCAL
Default principal: nfs/[email protected]

Valid starting     Expires            Service principal
11/15/11 11:12:04  11/15/11 21:12:09  krbtgt/[email protected]
        renew until 11/16/11 11:12:04, Etype (skey, tkt): ArcFour with  
HMAC/md5, ArcFour with HMAC/md5
11/15/11 11:12:09  11/15/11 21:12:09  nfs/[email protected]
        renew until 11/16/11 11:12:04, Etype (skey, tkt): ArcFour with  
HMAC/md5, ArcFour with HMAC/md5

Can the server mount itself? Try mounting the exported directories on
the server to see if that works.

Local mount just does not work with the same error: (
You might get more response on [email protected]

This mailing list I have not received an answer to my question: (



--
Best Regards


--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: http://lists.debian.org/[email protected]

Reply via email to