[Bug 566588] [NEW] Please add AES/3DES/RC4 support for gss_krb5

[Timo Aaltonen]

Public bug reported:

Upstream has recently released code to support more encryption types in
the linux NFS code:

kernel (queued for 2.6.35):
http://marc.info/?l=linux-nfs&m=127126664005440&w=2

nfs-utils (already in upstream git, will get in 1.2.3):
http://marc.info/?l=linux-nfs&m=127127273415295&w=2

I've briefly tested them on lucid, and at least RC4 seems to work fine
(samba3 doesn't support AES/3DES, so can't try those without patching
samba). The kernel patches apply on top of 2.6.32 without any conflicts,
2.6.31 needs 14ace024b1e. There was one hunk that failed on nfs-utils
1.2.0, but I tested the patches with 1.2.2-1 from Debian.

I'm hoping that this could be accepted as an SRU, because DES is
obsolete and insecure, and I believe sites like our university are
migrating away from insecure NFSv3 to NFSv4 & krb5 at an increasing
rate.

** Affects: linux (Ubuntu)
     Importance: Wishlist
         Status: New

** Affects: nfs-utils (Ubuntu)
     Importance: Wishlist
         Status: New

** Affects: linux (Ubuntu Lucid)
     Importance: Wishlist
         Status: New

** Affects: nfs-utils (Ubuntu Lucid)
     Importance: Wishlist
         Status: New

** Also affects: linux (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: linux (Ubuntu)
   Importance: Undecided => Wishlist

** Changed in: nfs-utils (Ubuntu)
   Importance: Undecided => Wishlist

** Also affects: linux (Ubuntu Lucid)
   Importance: Wishlist
       Status: New

** Also affects: nfs-utils (Ubuntu Lucid)
   Importance: Wishlist
       Status: New

-- 
Please add AES/3DES/RC4 support for gss_krb5
https://bugs.launchpad.net/bugs/566588
You received this bug notification because you are a member of Kernel
Bugs, which is subscribed to linux in ubuntu.