On 12/21/2012 05:40 PM, Mike Mercier wrote: > Hi Bret, > > I tried this once in the past with no success. If I recall correctly > (I can't find the reference anymore), Cisco (at least in IOS 12.4 that > I tested) only supports the DES-CBC-CRC enctype. This enctype > disabled by default in FreeIPA.
allow_weak_crypto = true in krb5.conf to enable it. > > Thanks, > Mike > > > On Fri, Dec 21, 2012 at 10:35 AM, Bret Wortman > <[email protected] <mailto:[email protected]>> > wrote: > > My network guy wants to use our FreeIPA server to authenticate > users on Cisco devices, but when we tried to import the keytab, it > balked on every one of the keys. > > Has anyone done this? Any pointers if so? > > Thanks, and happy holidays! > > > -- > Bret Wortman > The Damascus Group > Fairfax, VA > http://bretwortman.com/ > http://twitter.com/BretWortman > > _______________________________________________ > Freeipa-users mailing list > [email protected] <mailto:[email protected]> > https://www.redhat.com/mailman/listinfo/freeipa-users > > > > > _______________________________________________ > Freeipa-users mailing list > [email protected] > https://www.redhat.com/mailman/listinfo/freeipa-users -- Thank you, Dmitri Pal Sr. Engineering Manager for IdM portfolio Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/
_______________________________________________ Freeipa-users mailing list [email protected] https://www.redhat.com/mailman/listinfo/freeipa-users
