On Sun, Feb 05, 2012 at 12:37:28PM -0500, Jim Rees wrote: > Liam Gretton wrote: > > On 05/02/2012 14:16, Jim Rees wrote: > >There is a a NFS wiki, and it does have kerberos setup instructions: > >http://wiki.linux-nfs.org/wiki/index.php/Enduser_doc_kerberos > > > >The wiki has mostly been used by developers for developer info but it might > >be a good thing to use it for more general info too. > > Thanks, the problem isn't getting NFS with Kerberos to work in > general, it's with AD as the KDC. It seems that NFS still only > accepts DES encrypted Kerberos tickets, and these are specifically > disabled in Windows Server 2008 R2. > > Wasn't that fixed recently? Yes, it supports some AES-based enctypes now, for example. I wouldn't know a better source of the details than git log net/sunrpc/auth_gss/gss_krb5_* If someone wanted to summarize the situation for the wiki, go for it. --b. -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
