This is a discussion on Re: [Samba] Urgent... winbind and keytab file creation - Samba ; On Wed, 2008-04-02 at 10:39 -0500, Gerald (Jerry) Carter wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Oliver Weinmann wrote: > > Ok. i got it. I had to change the parameter for: > > > > ...
On Wed, 2008-04-02 at 10:39 -0500, Gerald (Jerry) Carter wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> Oliver Weinmann wrote:
> > Ok. i got it. I had to change the parameter for:
> > krb5_ccache_type = FILE
> > now the users get a "cached" ticket at login. COOL
> > but when the automount daemon tries to mount their home it fails:
> > Apr 2 16:41:09 rhel4wbtest2 rpc.gssd: WARNING: Failed to create
> > krb5 context for user with uid 82967 for server ds-san-02.vegagroup.net
> > Apr 2 16:41:12 rhel4wbtest2 rpc.gssd: rpcsec_gss:
> > gss_init_sec_context: (major) Miscellaneous failure - (minor) No
> > credentials found with supported encryption types
> I expect the nfsv4 service is trying to use 3des or aes.
> I always set these enc types in /etc/krb5.conf
> default_tgs_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5
> default_tkt_enctypes = RC4-HMAC DES-CBC-CRC DES-CBC-MD5
> preferred_enctypes = RC4-HMAC DES-CBC-MD5 DES-CBC-CRC
Currently linux nfs server requires that both server and client use ONLY
Any other combination will simply fail.
There are kernel patches reaching upstream that are adding 3des and aes
but not yet rc4-hmac IIRC.
Samba Team GPL Compliance Officer
Senior Software Engineer at Red Hat Inc.
To unsubscribe from this list go to the following URL and read the