gssd doesn't properly detect kernel supported enctypes

Bug #180449 reported by Vince Busam
6
Affects Status Importance Assigned to Milestone
nfs-utils (Ubuntu)
Fix Released
High
Unassigned

Bug Description

rpc.gssd in nfs-common 1.1.1-10ubuntu1 (hardy) is hard-coded to use only encryption type 1 (des-cbc-crc), and thus will not work with servers that require other encryption types, even though they are supported in the kernel.

This is fixed by CITI:
http://www.citi.umich.edu/projects/nfsv4/linux/nfs-utils-patches/1.1.1-1/nfs-utils-1.1.1-007-gssd_use_kernel_supported_enctypes.dif

Of course, applying all the other CITI patches as well would be great:
http://www.citi.umich.edu/projects/nfsv4/linux/nfs-utils-patches/1.1.1-1/nfs-utils-1.1.1-CITI_NFS4_ALL-1.dif

Revision history for this message
Philip Walls (ubuntu-rabidgeek) wrote :

Confirmed. This is a regression from the version of NFS in Gutsy.

Revision history for this message
Philip Walls (ubuntu-rabidgeek) wrote :

The patch linked to above applies cleanly and fixes the problem. Attaching to the bug.

Timo Aaltonen (tjaalton)
Changed in nfs-utils:
importance: Undecided → High
Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package nfs-utils - 1:1.1.1-12ubuntu2

---------------
nfs-utils (1:1.1.1-12ubuntu2) hardy; urgency=low

  * 11-gssd-use-kernel-supported-enctypes.diff:
    Allow to use encryption types that the kernel supports, not just
    des-cbc-crc. (LP: #180449)

 -- Timo Aaltonen <email address hidden> Tue, 15 Jan 2008 00:23:00 +0200

Changed in nfs-utils:
status: New → Fix Released
Revision history for this message
Vince Busam (vbusam) wrote :

This patch was dropped from 1.1.2-2ubuntu1

Revision history for this message
Vince Busam (vbusam) wrote :

Regression in 1.1.2-2ubuntu1

Changed in nfs-utils:
status: Fix Released → New
Revision history for this message
Vince Busam (vbusam) wrote :

Fixed in 1:1.1.2-2ubuntu2

Changed in nfs-utils:
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.