]> git.decadent.org.uk Git - nfs-utils.git/commit - utils/gssd/svcgssd_krb5.c
svcgssd: use correct defaults in call to gss_set_allowable_enctypes
authorKevin Coffman <kwc@citi.umich.edu>
Thu, 21 Jul 2011 18:16:59 +0000 (14:16 -0400)
committerLuk Claes <luk@debian.org>
Sun, 2 Oct 2011 14:16:45 +0000 (16:16 +0200)
commita54b4440ffb435543432aec5e63ab18ec6b08fa0
tree91a4fdbe4edf24d2560d6ebac336ced11d4c6caa
parent89a2462480c324c27cf1050f13879ce3adb44a3e
svcgssd: use correct defaults in call to gss_set_allowable_enctypes

For the window of kernels between 2.6.35 (when the support
for newer encryption was added) and 2.6.39 (when the ability
to read the supported enctypes from the kernel was added),
use a default of all enctypes when the kernel supported
enctypes file cannot be read.

For kernels before 2.6.35, continue to use a default of
only DES enctypes.

Note that the version of Kerberos must also support the use of
gss_set_allowable_enctypes for service-side negotiations.

See also: http://bugzilla.redhat.com/show_bug.cgi?id=719776

Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Steve Dickson <steved@redhat.com>
utils/gssd/svcgssd_krb5.c