[Bug 512110] [NEW] gssd regression, "Program lacks support for encryption type"

[Russ Allbery]

Jochen <jradmacher at gmx.de> writes:

> After upgrading the krb5 libraries to 1.8 I could not mount my
> Kerberized NFS4 shares. The following error Message is in the syslog for
> every mount attempt:

> rpc.gssd[1298]: rpcsec_gss: gss_init_sec_context: (major) Unspecified
> GSS failure.  Minor code may provide more information - (minor) Program
> lacks support for encryption type

> Switching back to 1.7 fixes this Problem.

Sounds like NFS v4 doesn't support stronger encryption types than DES.
You'll need to add:

    allow_weak_crypto = true

to the [libdefaults] section of your krb5.conf file.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>

-- 
gssd regression, "Program lacks support for encryption type"
https://bugs.launchpad.net/bugs/512110
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to krb5 in ubuntu.