Wed Oct 20 02:45:58 MDT 2010
default_tkt_enctypes = rc4-hmac des-cbc-md5
in krb5.conf on both client and server.
Then the problem changes slightly. With that option set, the client first
requests nfs/foo.bar.com with enctypes "rc4-hmac des-cbc-md5", and that
succeeds, but immediately following that the client sends the exact same
request, only this time the enctypes are back to "des-cbc-crc des-cbc-md5
des-cbc-md4" and it fails again with PAC checksum error.
So it seems that I have 2 bugs.
1) PAC checksum bug
2) kerberos client (libraries or nfs4?) bug that causes the second request
ignoring the enctypes specified in krb5.conf.
What can I do about #1?
More information about the samba-technical