+++ nfs-utils-1.2.3.dist/configure.ac 2010-10-03 14:47:50.699424847 +0200
@@ -246,12 +246,6 @@
- dnl check for nfsidmap libraries and headers
- AC_LIBNFSIDMAP
+ dnl check for the keyutils libraries and headers
+ AC_KEYUTILS
-
- dnl librpcsecgss already has a dependency on libgssapi,
- dnl but we need to make sure we get the right version
dnl Checks librpcsec version
AC_DEFUN([AC_RPCSEC_VERSION], [
-- PKG_CHECK_MODULES([GSSGLUE], [libgssglue >= 0.1])
+- PKG_CHECK_MODULES([GSSGLUE], [libgssglue >= 0.3])
+ dnl libgssglue is needed only for MIT Kerberos
+ if test "$gssapi_lib" = gssapi_krb5; then
-+ PKG_CHECK_MODULES([GSSGLUE], [libgssglue >= 0.1])
++ PKG_CHECK_MODULES([GSSGLUE], [libgssglue >= 0.3])
+ fi
dnl TI-RPC replaces librpcsecgss
if (maj_stat != GSS_S_COMPLETE) {
pgsserr("gss_set_allowable_enctypes",
+--- nfs-utils-1.2.4/utils/gssd/svcgssd_krb5.c~ 2011-06-30 15:00:42.000000000 +0200
++++ nfs-utils-1.2.4/utils/gssd/svcgssd_krb5.c 2011-08-03 12:40:53.865782009 +0200
+@@ -186,8 +186,13 @@
+ num_enctypes = default_num_enctypes;
+ }
+
++#ifdef HAVE_HEIMDAL
++ maj_stat = gss_krb5_set_allowable_enctypes(&min_stat, gssd_creds,
++ num_enctypes, enctypes);
++#else
+ maj_stat = gss_set_allowable_enctypes(&min_stat, gssd_creds,
+ &krb5oid, num_enctypes, enctypes);
++#endif
+ if (maj_stat != GSS_S_COMPLETE) {
+ printerr(1, "WARNING: gss_set_allowable_enctypes failed\n");
+ pgsserr("svcgssd_limit_krb5_enctypes: gss_set_allowable_enctypes",