What to do to get support for more RPCSEC_GSS/krb5 enctypes for lucid?

[Andy Whitcroft]

On Fri, Jul 02, 2010 at 12:07:51PM +0300, Timo Aaltonen wrote:
> 
>  	Hi!
> 
>   I filed bug 566588 a while back, but didn't keep track of it due to being 
> otherwise occupied. I'd now like to get it fixed, because we are about to 
> deploy NFSv4 with RPCSEC_GSS, and I'd love to replace DES with RC4 (best 
> samba can do atm).
> 
> I've been running 10.04 with the vanilla 2.6.35 from maverick (which has 
> the support), and it works like a charm, encryption-wise :) The nfs-utils 
> is also from maverick plus the three patches to support the AES/3DES/RC4 
> enctypes from upstream git. But I can maintain nfs-utils locally, and that 
> part of the bug is out of scope here anyway.
> 
> Should I create a git branch of lucid with the commits merged from 2.6.35 
> or could you pull them directly if I provide a list of commit-id's?
> 
> 
> * https://bugs.edge.launchpad.net/ubuntu/+source/linux/+bug/566588

With all things for releases which are already shipped, it is a trade
off between the size/invasivness off the patches against the possible
benefits.  A quick look at the upstream patches you point to seems to
say that its a pretty big patch set?  It would depend to some extent how
much of that is additions and how much modifications.

You note that this stuff is going to be in 2.6.35, which would mean that
the lts-backports-maverick kernel would presumably work for you?  Have
you considered that as an option?

-apw