From: Derrick Brashear <shadow@dementia.org>
Date: Mon, 1 Nov 2010 02:21:19 +0000 (-0400)
Subject: aklog weak warning
X-Git-Tag: openafs-devel-1_7_1~1198
X-Git-Url: https://git.openafs.org/?p=openafs.git;a=commitdiff_plain;h=93ab13cbf3cfee30524f63925a11a0ab0c55d600

aklog weak warning

make aklog guess when you need to enable weak crypto

Change-Id: I5f79e654d2ebcd8500d66d20f00edb49b9d62323
Reviewed-on: http://gerrit.openafs.org/3209
Reviewed-by: Jeffrey Altman <jaltman@openafs.org>
Reviewed-by: Derrick Brashear <shadow@dementia.org>
Tested-by: Derrick Brashear <shadow@dementia.org>
---

diff --git a/src/aklog/aklog.c b/src/aklog/aklog.c
index 81be7eb..c547350 100644
--- a/src/aklog/aklog.c
+++ b/src/aklog/aklog.c
@@ -622,6 +622,11 @@ rxkad_get_ticket(krb5_context context, char *realm,
 	fprintf(stderr, "%s: Couldn't get %s AFS tickets:\n",
 		progname, cell->name);
 	afs_com_err(progname, status, "while getting AFS tickets");
+#ifdef KRB5_CC_NOT_KTYPE
+	if (status == KRB5_CC_NOT_KTYPE) {
+	    fprintf(stderr, "allow_weak_enctypes may be required in the Kerberos configuration\n");
+	}
+#endif
 	status = AKLOG_KERBEROS;
 	goto out;
     }