From: Derrick Brashear <shadow@dementia.org>
Date: Mon, 1 Nov 2010 02:21:19 +0000 (-0400)
Subject: aklog weak warning
X-Git-Tag: debian/1.6.0.pre3-1~5^2^2~81
X-Git-Url: https://git.michaelhowe.org/gitweb/?a=commitdiff_plain;h=bf0f3dbd06bd73aeb7333f357708b2ad07918520;p=packages%2Fo%2Fopenafs.git

aklog weak warning

make aklog guess when you need to enable weak crypto

Reviewed-on: http://gerrit.openafs.org/3209
Reviewed-by: Jeffrey Altman <jaltman@openafs.org>
Reviewed-by: Derrick Brashear <shadow@dementia.org>
Tested-by: Derrick Brashear <shadow@dementia.org>
(cherry picked from commit 93ab13cbf3cfee30524f63925a11a0ab0c55d600)

Change-Id: I48b0f6c40a2a6b989bfc859267b080e31a6ffc3c
Reviewed-on: http://gerrit.openafs.org/3988
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Derrick Brashear <shadow@dementia.org>
---

diff --git a/src/aklog/aklog.c b/src/aklog/aklog.c
index bade270ad..492649002 100644
--- a/src/aklog/aklog.c
+++ b/src/aklog/aklog.c
@@ -617,6 +617,11 @@ rxkad_get_ticket(krb5_context context, char *realm,
 	fprintf(stderr, "%s: Couldn't get %s AFS tickets:\n",
 		progname, cell->name);
 	afs_com_err(progname, status, "while getting AFS tickets");
+#ifdef KRB5_CC_NOT_KTYPE
+	if (status == KRB5_CC_NOT_KTYPE) {
+	    fprintf(stderr, "allow_weak_enctypes may be required in the Kerberos configuration\n");
+	}
+#endif
 	status = AKLOG_KERBEROS;
 	goto out;
     }