"only the encryption type of des-cbc-crc is functional so far in the kernel"?
Anders Andersson
pipatron at gmail.com
Thu Jun 19 14:44:20 EDT 2008
Hi! I'm trying to learn how to set up nfsv4 with kerberos, and I found
this howto: http://wiki.linux-nfs.org/wiki/index.php/Enduser_doc_kerberos
Regarding this item:
---
Create machine credentials for the client. This means creating a
Kerberos V5 principal/instance name of the form
nfs/dns.name.of.client at REALM, and either adding a key for this
principal to an existing /etc/krb5.keytab or creating an
/etc/krb5.keytab. Note: only the encryption type of des-cbc-crc is
functional so far in the kernel, so add ONLY this type of key.
---
I wonder if this part is still true: "only the encryption type of
des-cbc-crc is functional so far in the kernel"?
It's difficult to say unless the kernel version is specified, or
something like "as of 200x-xx-xx, foo is bar".
Kind regards,
Anders
More information about the NFSv4
mailing list