kerberos implementations compatibility

Guillaume Rousse Guillaume.Rousse at inria.fr
Tue Mar 20 05:41:25 EDT 2007


Hello.

On mandriva, nfs-utils is built with MIT kerberos libraries. I tried to
setup a gss/krb5 export, using a keytab produced by an heimdal KDC. All
my attempts to launch rpc.gssd failed with the following error message:

messages.1.gz:Mar 16 12:28:49 etoile rpc.gssd[8086]: rpcsec_gss:
gss_init_sec_context: (major) Miscellaneous failure - (minor) No
credentials found with supported encryption types

Despite my principal only had des-cbc-crc keys, with pw-salt as salting
type ('normal' doesn't exist with heimdal).

As soon as I changed for a MIT KDC, everything was fine. So basically,
I'm curious about potential incompatibilities between keytab/encryption
scheme between MIT/Heimdal implementations. I know, this is rather a
kerberos question than a nfs one :)


More information about the NFSv4 mailing list