[Pkg-samba-maint] Bug#556536: Bug#556536: new wrinkle

[Steve Langasek]

On Mon, Jan 25, 2010 at 01:49:43PM -0600, Dale Schroeder wrote:
> As of this morning, the symptoms have changed.
> Stable, testing, and unstable all return some variation of the
> following when doing "net ads testjoin".
> There is no connectivity to any share, and the error goes across
> multiple systems.

>     0] libads/sasl.c:819 (ads_sasl_spegno_bind)
>     kinit succeeded but ads_sasl_spnego_krb5_bind failed: Program
> lacks support for encryption type

> ii  krb5-config                           2.2
> ii  krb5-doc                              1.8+dfsg~alpha1-4
> ii  krb5-user                             1.8+dfsg~alpha1-4
> ii  libgssapi-krb5-2                      1.8+dfsg~alpha1-4
> ii  libkrb5-3                             1.8+dfsg~alpha1-4
> ii  libkrb53                              1.6.dfsg.4~beta1-5lenny2
> ii  libkrb5support0                       1.8+dfsg~alpha1-4

> What would cause this sudden change on a system whose krb5
> configuration had worked for years?

The fact that krb5 1.8 disables DES by default.  See
/usr/share/doc/libkrb5-3/NEWS.Debian.gz.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 828 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20100125/4745787b/attachment.pgp>