No subject


Wed Oct 20 02:45:58 MDT 2010


default_tkt_enctypes = rc4-hmac des-cbc-md5

in krb5.conf on both client and server.


Then the problem changes slightly.  With that option set, the client first
requests nfs/foo.bar.com with enctypes "rc4-hmac des-cbc-md5", and that
succeeds, but immediately following that the client sends the exact same
request, only this time the enctypes are back to "des-cbc-crc des-cbc-md5
des-cbc-md4" and it fails again with PAC checksum error.


So it seems that I have 2 bugs.

1) PAC checksum bug

2) kerberos client (libraries or nfs4?) bug that causes the second request
ignoring the enctypes specified in krb5.conf.


What can I do about #1?

-Aaron


More information about the samba-technical mailing list