]> git.decadent.org.uk Git - nfs-utils.git/commit
svcgssd: use correct defaults in call to gss_set_allowable_enctypes
authorKevin Coffman <kwc@citi.umich.edu>
Thu, 21 Jul 2011 18:16:59 +0000 (14:16 -0400)
committerSteve Dickson <steved@redhat.com>
Thu, 21 Jul 2011 18:26:11 +0000 (14:26 -0400)
commit66bc3aefbdd8541d159d4e759d87194f16f5bf90
tree8fa2186e318efa9fbc25ad61ec9cdc62b1fe4bca
parentaa703c04fd20a5f5c74b7665f55dd9575b806448
svcgssd: use correct defaults in call to gss_set_allowable_enctypes

For the window of kernels between 2.6.35 (when the support
for newer encryption was added) and 2.6.39 (when the ability
to read the supported enctypes from the kernel was added),
use a default of all enctypes when the kernel supported
enctypes file cannot be read.

For kernels before 2.6.35, continue to use a default of
only DES enctypes.

Note that the version of Kerberos must also support the use of
gss_set_allowable_enctypes for service-side negotiations.

See also: http://bugzilla.redhat.com/show_bug.cgi?id=719776

Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
utils/gssd/svcgssd_krb5.c