On Wed, 2011-10-26 at 09:05 +0200, Luk Claes wrote:
[...]
> >>> "Adam" == Adam D Barratt writes:
> >>
> >>
> >> Adam> The krb5 package was uploaded and I've (somewhat belatedly)
> >> Adam> marked it for acceptance at the next dinstall. What's the
> >> Adam> status of the nfs-utils
On 09/12/2011 08:24 PM, Adam D. Barratt wrote:
> On Mon, 2011-09-05 at 12:46 -0400, Sam Hartman wrote:
>>> "Adam" == Adam D Barratt writes:
>>
>>
>> Adam> The krb5 package was uploaded and I've (somewhat belatedly)
>> Adam> marked it for acceptance at the next dinstall. What's the
>>
It should be fixed in unstable by actually supporting the new enctypes.
While ncice, that rather misses the point.
--
To UNSUBSCRIBE, email to debian-kernel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/ts
On 10/03/2011 07:20 PM, Philipp Kern wrote:
> On Mon, Sep 05, 2011 at 12:46:13PM -0400, Sam Hartman wrote:
>>> "Adam" == Adam D Barratt writes:
>> Adam> The krb5 package was uploaded and I've (somewhat belatedly)
>> Adam> marked it for acceptance at the next dinstall. What's the
>>
On Mon, Sep 05, 2011 at 12:46:13PM -0400, Sam Hartman wrote:
> > "Adam" == Adam D Barratt writes:
> Adam> The krb5 package was uploaded and I've (somewhat belatedly)
> Adam> marked it for acceptance at the next dinstall. What's the
> Adam> status of the nfs-utils upload?
> My gues
On Mon, 2011-09-05 at 12:46 -0400, Sam Hartman wrote:
> > "Adam" == Adam D Barratt writes:
>
>
> Adam> The krb5 package was uploaded and I've (somewhat belatedly)
> Adam> marked it for acceptance at the next dinstall. What's the
> Adam> status of the nfs-utils upload?
>
> My gu
> "Adam" == Adam D Barratt writes:
Adam> The krb5 package was uploaded and I've (somewhat belatedly)
Adam> marked it for acceptance at the next dinstall. What's the
Adam> status of the nfs-utils upload?
My guess is they were waiting for krb5.
Remember they have to increase buil
On Fri, 2011-08-05 at 19:09 +0200, Philipp Kern wrote:
> On Mon, Aug 01, 2011 at 01:34:34AM -0700, Steve Langasek wrote:
> > I've attached the patches for both packages to this mail. Phil, is it ok
> > for these to be uploaded to stable-proposed-updates? This fixes a bug that
> > makes squeeze ke
I expect to get to the krb5 package in a day or so. I expect nfs-utils
will want to up its build-depends on krb5 to 1.8.3+dfsg-4squeeze2
--
To UNSUBSCRIBE, email to debian-kernel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http
On Mon, Aug 01, 2011 at 01:34:34AM -0700, Steve Langasek wrote:
> On Tue, Jul 19, 2011 at 05:42:34PM -0400, Sam Hartman wrote:
> > I don't have checkouts handy, but my strong suspicion is that if someone
> > is now passing in GSS_C_NT_HOSTBASED_SERVICE into gssd_acquire_cred and
> > there isn't an
> "Philipp" == Philipp Kern writes:
Philipp> On Mon, Aug 01, 2011 at 01:34:34AM -0700, Steve Langasek wrote:
>> On Tue, Jul 19, 2011 at 05:42:34PM -0400, Sam Hartman wrote:
> > I don't have checkouts handy, but my strong suspicion is that if
>> someone > is now passing in GSS_C_NT
On Mon, Aug 01, 2011 at 01:34:34AM -0700, Steve Langasek wrote:
> On Tue, Jul 19, 2011 at 05:42:34PM -0400, Sam Hartman wrote:
> > I don't have checkouts handy, but my strong suspicion is that if someone
> > is now passing in GSS_C_NT_HOSTBASED_SERVICE into gssd_acquire_cred and
> > there isn't an
If I get an ack from SRM i'll do the krb5 upload.
--
To UNSUBSCRIBE, email to debian-kernel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/tsllivd472o@mit.edu
reassign 622146 nfs-kernel-server,src:krb5
found 622146 nfs-kernel-server/1:1.2.2-4
found 622146 src:krb5/1.8.3+dfsg-4
fixed 622146 nfs-kernel-server/1:1.2.4-1
fixed 622146 src:krb5/1.9.1+dfsg-1
tags 622146 patch
thanks
On Tue, Jul 19, 2011 at 05:42:34PM -0400, Sam Hartman wrote:
> I don't have ch
I don't have checkouts handy, but my strong suspicion is that if someone
is now passing in GSS_C_NT_HOSTBASED_SERVICE into gssd_acquire_cred and
there isn't an argument slot, you can leave it off.
gss_c_nt_hostbased_service has always been the default for gssd.
--
To UNSUBSCRIBE, email to debia
On Tue, Jul 19, 2011 at 02:31:36PM -0400, Sam Hartman wrote:
> > "Steve" == Steve Langasek writes:
> Steve> Hi Sam, I've also run into this bug, in the context of
> Steve> preparing to update nfs-utils in Ubuntu for IPv6 support. My
> Steve> NFS server is running squeeze, and upd
> "Steve" == Steve Langasek writes:
Steve> Hi Sam, I've also run into this bug, in the context of
Steve> preparing to update nfs-utils in Ubuntu for IPv6 support. My
Steve> NFS server is running squeeze, and updating causes the client
Steve> and server to fail to negotiate as
Hi Sam,
I've also run into this bug, in the context of preparing to update nfs-utils
in Ubuntu for IPv6 support. My NFS server is running squeeze, and updating
causes the client and server to fail to negotiate as described.
It seems that it's possible to work around it by adding this single line
OK, I have no clue nor really any interest in debugging DES.
There is a real bug here introduced in krb5 1.7 which added enctype
negotiation . I'd expect that to create some problems for sid clients
talking to squeeze servers. There's a solution to that which involves
backporting the nfs-utils pa
On Wed, Jun 08, 2011 at 02:10:32PM -0400, Sam Hartman wrote:
> Hi.
> I was missing some context here.
>
> My suspicion is that things will work
> if you add
> permitted_enctypes = des-cbc-crc
> default_tgs_enctypes = des-cbc-crc
> to the configuration of the nfs server
>
> And make sure that the
Hi.
I was missing some context here.
My suspicion is that things will work
if you add
permitted_enctypes = des-cbc-crc
default_tgs_enctypes = des-cbc-crc
to the configuration of the nfs server
And make sure that the nfs principal on the NFS server has nothing but a
des-cbc-crc key in the KDC data
On Tue, Jun 07, 2011 at 01:10:23PM -0400, Sam Hartman wrote:
> > "Luk" == Luk Claes writes:
>
> Luk> On 06/06/2011 05:37 PM, Alberto Gonzalez Iniesta wrote:
> >> Adding the following line in the [libdefaults] section of
> >> /etc/krb5.conf fixed the problem for me (tm), probably n
> "Luk" == Luk Claes writes:
Luk> On 06/06/2011 05:37 PM, Alberto Gonzalez Iniesta wrote:
>> Adding the following line in the [libdefaults] section of
>> /etc/krb5.conf fixed the problem for me (tm), probably not the
>> best solution, but works: permitted_enctypes = des-cbc-md
On 06/07/2011 07:01 PM, Luk Claes wrote:
> On 06/06/2011 05:37 PM, Alberto Gonzalez Iniesta wrote:
>> Adding the following line in the [libdefaults] section of /etc/krb5.conf
>> fixed the problem for me (tm), probably not the best solution, but
>> works:
>> permitted_enctypes = des-cbc-md5
>
> It'
On 06/06/2011 05:37 PM, Alberto Gonzalez Iniesta wrote:
> Adding the following line in the [libdefaults] section of /etc/krb5.conf
> fixed the problem for me (tm), probably not the best solution, but
> works:
> permitted_enctypes = des-cbc-md5
It's probably better to set enable_weak_crypto=yes, do
Am Montag, 11. April 2011, 18:28:45 schrieb Luk Claes:
> On 04/10/2011 08:45 PM, Rico Rommel wrote:
> > Am Sonntag, 10. April 2011, 20:09:36 schrieb Luk Claes:
> >> On 04/10/2011 06:10 PM, Rico Rommel wrote:
> >>> Am Sonntag, 10. April 2011, 17:57:11 schrieb Ben Hutchings:
> On Sun, 2011-04-10
On 04/10/2011 08:45 PM, Rico Rommel wrote:
> Am Sonntag, 10. April 2011, 20:09:36 schrieb Luk Claes:
>> On 04/10/2011 06:10 PM, Rico Rommel wrote:
>>> Am Sonntag, 10. April 2011, 17:57:11 schrieb Ben Hutchings:
On Sun, 2011-04-10 at 17:48 +0200, Rico Rommel wrote:
>>> I noticed, that nfs-comm
Am Sonntag, 10. April 2011, 20:09:36 schrieb Luk Claes:
> On 04/10/2011 06:10 PM, Rico Rommel wrote:
> > Am Sonntag, 10. April 2011, 17:57:11 schrieb Ben Hutchings:
> >> On Sun, 2011-04-10 at 17:48 +0200, Rico Rommel wrote:
> >>> Package: nfs-common
> >>> Version: 1:1.2.2-4
> >>> Severity: normal
>
On 04/10/2011 06:10 PM, Rico Rommel wrote:
> Am Sonntag, 10. April 2011, 17:57:11 schrieb Ben Hutchings:
>> On Sun, 2011-04-10 at 17:48 +0200, Rico Rommel wrote:
>>> Package: nfs-common
>>> Version: 1:1.2.2-4
>>> Severity: normal
>>> Tags: ipv6
>>
>> [...]
>>
>> Why ipv6?
>>
>> Ben.
>
> I noticed,
On Sun, 2011-04-10 at 17:48 +0200, Rico Rommel wrote:
> Package: nfs-common
> Version: 1:1.2.2-4
> Severity: normal
> Tags: ipv6
[...]
Why ipv6?
Ben.
--
Ben Hutchings
Once a job is fouled up, anything done to improve it makes it worse.
signature.asc
Description: This is a digitally signed mes
Am Sonntag, 10. April 2011, 17:57:11 schrieb Ben Hutchings:
> On Sun, 2011-04-10 at 17:48 +0200, Rico Rommel wrote:
> > Package: nfs-common
> > Version: 1:1.2.2-4
> > Severity: normal
> > Tags: ipv6
>
> [...]
>
> Why ipv6?
>
> Ben.
I noticed, that nfs-common doesn't depend on librpcsecgss3 anym
Package: nfs-common
Version: 1:1.2.2-4
Severity: normal
Tags: ipv6
After installing nfs-common 1:1.2.3-2 on clients (unstable) the nfs-kernel-
server in squeeze denies access for kerberized nfs exports.
syslog on the server (squeeze) gives:
rpc.svcgssd[1049]: ERROR: prepare_krb5_rfc_cfx_buffer:
32 matches
Mail list logo
