Package: release-notes
Severity: important

As noted in bug #568771 and /usr/share/doc/libkrb5-3/NEWS.Debian.gz,
weak cryptos are disabled by default but necessary for kerberized NFS.

I just upgraded an entire network of 10 machines to squeeze, and on all
machines (NFS server, NFS clients, KDC), it was necessary to add
"allow_weak_crypto=true" to the [libdefaults] section in /etc/krb5.conf.

I think the issue is important enough to warrant a note in the release
docs since mounting a kerberized NFS share will fail with unhelpful
error messages until the above fix has been done on all machines.

-- 
David Härdeman



--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: http://lists.debian.org/[email protected]

Reply via email to