[Bug 512110] Re: gssd regression, Program lacks support for encryption type
We're adding an API to krb5 to fix this for OpenAFS. Because of the way the API is constructed, it's very difficult for GSSD to actually call it. Do you have a pointer to the details? -- gssd regression, Program lacks support for encryption type https://bugs.launchpad.net/bugs/512110 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 512110] Re: gssd regression, Program lacks support for encryption type
the NFS folks have have multiple years to implement something stronger than DES. Unlike with OpenAFS, the protocol has been quite clear; it's purely a matter of writing code. Yeah, the code is finally merged for 2.6.35, but that took longer than it should. (If you know anyone interested in funding NFS security work) -- gssd regression, Program lacks support for encryption type https://bugs.launchpad.net/bugs/512110 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
Re: [Bug 512110] Re: gssd regression, Program lacks support for encryption type
J == J Bruce Fields bfie...@fieldses.org writes: J We're adding an API to krb5 to fix this for OpenAFS. Because of J the way the API is constructed, it's very difficult for GSSD to J actually call it. J Do you have a pointer to the details? /* Allows the appplication to override the profile's allow_weak_crypto setting. * Primarily for use by aklog. */ krb5_error_code KRB5_CALLCONV krb5_allow_weak_crypto(krb5_context context, krb5_boolean enable); The problem of course being the need for a krb5 context. -- gssd regression, Program lacks support for encryption type https://bugs.launchpad.net/bugs/512110 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 512110] Re: gssd regression, Program lacks support for encryption type
** Tags added: glucid -- gssd regression, Program lacks support for encryption type https://bugs.launchpad.net/bugs/512110 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 512110] Re: gssd regression, Program lacks support for encryption type
** Changed in: krb5 (Ubuntu) Importance: Undecided = Medium ** Changed in: krb5 (Ubuntu) Status: New = Confirmed -- gssd regression, Program lacks support for encryption type https://bugs.launchpad.net/bugs/512110 You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in ubuntu. -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
