Can any one confirm, or deny, that using only permitted_enctypes = "des-cbc-crc"
will work around the problem? How can I create such a "des-cbc-crc" key, if I do not have them yet? Olga On Thu, Mar 20, 2014 at 1:44 PM, steve <st...@steve-ss.com> wrote: > On Thu, 2014-03-20 at 13:05 +0100, Wendy Lin wrote: >> On 20 March 2014 11:03, steve <st...@steve-ss.com> wrote: >> > On Thu, 2014-03-20 at 00:52 +0100, Wendy Lin wrote: >> >> >> >> I tried permitted_enctypes = "des-cbc-crc des3-cbc-sha1" but this only >> >> gives me a new kind of (its mocking me?!) error message in >> >> /var/log/messages on the server: >> >> >> >> rpc.svcgssd[6967]: qword_eol: fflush failed: errno 38 (Function not >> >> implemented) >> >> >> >> Wendy >> > >> > Hi again >> > Looks like it may be fighting a kernel problem. The server needs 2.6.38 >> > or better: >> > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622146 >> > You also need a recent kernel server. What do you have on 11.3? >> >> Linux test1 2.6.34.10-0.6-desktop #1 SMP PREEMPT 2011-12-13 18:27:38 >> +0100 x86_64 x86_64 x86_64 GNU/Linux >> >> There are kernels-of-the-day builds from Suse, but 11.3 is so old that >> I do not know where they put this stuff to. >> >> > With 13.1, we're using arcfour-hmac-md5 throughout the mount process. Is >> > there any chance you can upgrade? >> >> Doable, but it will take months to migrate. What do not understand is >> that no one, say Linus or friends, *test* their stuff it it is really >> interoperable with the rest of the world. It hurts, badly. >> >> Wendy > > OK. Let's try to get that kernel. We've just posted to the openSUSE > list. Maybe there's an rpm lying around somewhere. . . > http://lists.opensuse.org/opensuse/2014-03/msg00511.html > Steve > > > ________________________________________________ > Kerberos mailing list Kerberos@mit.edu > https://mailman.mit.edu/mailman/listinfo/kerberos -- , _ _ , { \/`o;====- Olga Kryzhanovska -====;o`\/ } .----'-/`-/ olga.kryzhanov...@gmail.com \-`\-'----. `'-..-| / http://twitter.com/fleyta \ |-..-'` /\/\ Solaris/BSD//C/C++ programmer /\/\ `--` `--` ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
