gss_krb5: Add upcall info indicating supported kerberos enctypes
authorTrond Myklebust <Trond.Myklebust@netapp.com>
Thu, 8 Apr 2010 18:09:58 +0000 (14:09 -0400)
committerTrond Myklebust <Trond.Myklebust@netapp.com>
Fri, 14 May 2010 19:09:17 +0000 (15:09 -0400)
commit683ac6656cb05b6e83593770ffc049eee4a4d119
tree531c849ad7b20ade79e69c8daa446d99722958ae
parent47d84807762966c3611c38adecec6ea703ddda7a
gss_krb5: Add upcall info indicating supported kerberos enctypes

The text based upcall now indicates which Kerberos encryption types are
supported by the kernel rpcsecgss code.  This is used by gssd to
determine which encryption types it should attempt to negotiate
when creating a context with a server.

The server principal's database and keytab encryption types are
what limits what it should negotiate.  Therefore, its keytab
should be created with only the enctypes listed by this file.

Currently we support des-cbc-crc, des-cbc-md4 and des-cbc-md5

Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
include/linux/sunrpc/gss_api.h
net/sunrpc/auth_gss/auth_gss.c
net/sunrpc/auth_gss/gss_krb5_mech.c