No subject

Wed Oct 20 02:45:58 MDT 2010

default_tkt_enctypes = rc4-hmac des-cbc-md5

in krb5.conf on both client and server.

Then the problem changes slightly.  With that option set, the client first
requests nfs/ with enctypes "rc4-hmac des-cbc-md5", and that
succeeds, but immediately following that the client sends the exact same
request, only this time the enctypes are back to "des-cbc-crc des-cbc-md5
des-cbc-md4" and it fails again with PAC checksum error.

So it seems that I have 2 bugs.

1) PAC checksum bug

2) kerberos client (libraries or nfs4?) bug that causes the second request
ignoring the enctypes specified in krb5.conf.

What can I do about #1?


More information about the samba-technical mailing list