Skip to content
Commit 683ac665 authored by Trond Myklebust's avatar Trond Myklebust
Browse files

gss_krb5: Add upcall info indicating supported kerberos enctypes



The text based upcall now indicates which Kerberos encryption types are
supported by the kernel rpcsecgss code.  This is used by gssd to
determine which encryption types it should attempt to negotiate
when creating a context with a server.

The server principal's database and keytab encryption types are
what limits what it should negotiate.  Therefore, its keytab
should be created with only the enctypes listed by this file.

Currently we support des-cbc-crc, des-cbc-md4 and des-cbc-md5

Signed-off-by: default avatarTrond Myklebust <Trond.Myklebust@netapp.com>
parent 47d84807
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment