Return-Path: Received: from mail-out2.uio.no ([129.240.10.58]:34359 "EHLO mail-out2.uio.no" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754568Ab1DONbh (ORCPT ); Fri, 15 Apr 2011 09:31:37 -0400 Subject: Re: [BUG] sec=krb5 mount problem with nfs-utils 1.2.3 on client side From: Trond Myklebust To: Michael Guntsche Cc: Kevin Coffman , "Dr. J. Bruce Fields" , "Finney, Sean" , "vovan@vovan.nl" , "linux-nfs@vger.kernel.org" In-Reply-To: <1302874150.29239.12.camel@lade.trondhjem.org> References: <20110415010913@it-loops.com> <1302840158.2447.5.camel@vovan.net.home> <20110415120934@it-loops.com> <1302874150.29239.12.camel@lade.trondhjem.org> Content-Type: text/plain; charset="UTF-8" Date: Fri, 15 Apr 2011 09:31:29 -0400 Message-ID: <1302874289.29239.14.camel@lade.trondhjem.org> Sender: linux-nfs-owner@vger.kernel.org List-ID: MIME-Version: 1.0 On Fri, 2011-04-15 at 09:29 -0400, Trond Myklebust wrote: > On Fri, 2011-04-15 at 12:16 +0200, Michael Guntsche wrote: > > Thank you for the information, but I got it working in the meantime. > > The main problem still is that the code for some reason tries to use AES > > although I tried specifying a different enctype in my kerberos config. > > Nevertheless it should just work with AES as well, so where was the > > problem? > > Quite simple....missing kernel support. I enabled AES support but I DID > > NOT enable CTS support which is of course needed as well. So after > > compiling the server and client kernels with BOTH AES and CTS support I > > can no mount the NFS4 export without any issues. > > Sigh. We really should not allow that kind of config. It just creates > confusion. > > Kevin, what are the dependencies for the kerberos V module today? Am I > missing something in the following list? > > depends on SUNRPC && CRYPTO > depends on CRYPTO_MD5 && CRYPTO_DES && CRYPTO_CBC && CRYPTO_CTS > depends on CRYPTO_ECB && CRYPTO_HMAC && CRYPTO_MD5 && I suppose we only need one test for CRYPTO_MD5... > CRYPTO_SHA1 > depends on CRYPTO_AES > > Cheers > Trond > > -- > To unsubscribe from this list: send the line "unsubscribe linux-nfs" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html