Transferring NFSv4 nfs/ keys from KDC to client?

[Wendy Lin]

On 20 March 2014 11:03, steve <steve at steve-ss.com> wrote:
> On Thu, 2014-03-20 at 00:52 +0100, Wendy Lin wrote:
>>
>> I tried permitted_enctypes = "des-cbc-crc des3-cbc-sha1" but this only
>> gives me a new kind of (its mocking me?!) error message in
>> /var/log/messages on the server:
>>
>> rpc.svcgssd[6967]: qword_eol: fflush failed: errno 38 (Function not implemented)
>>
>> Wendy
>
> Hi again
> Looks like it may be fighting a kernel problem. The server needs 2.6.38
> or better:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=622146
> You also need a recent kernel server. What do you have on 11.3?

Linux test1 2.6.34.10-0.6-desktop #1 SMP PREEMPT 2011-12-13 18:27:38
+0100 x86_64 x86_64 x86_64 GNU/Linux

There are kernels-of-the-day builds from Suse, but 11.3 is so old that
I do not know where they put this stuff to.

> With 13.1, we're using arcfour-hmac-md5 throughout the mount process. Is
> there any chance you can upgrade?

Doable, but it will take months to migrate. What do not understand is
that no one, say Linus or friends, *test* their stuff it it is really
interoperable with the rest of the world. It hurts, badly.

Wendy