Re: [Freeipa-devel] [PATCH] 965 Allow ipa-getkeytab to skip missing enctypes

2012-03-05 Thread Simo Sorce
On Fri, 2012-02-24 at 08:57 -0500, Rob Crittenden wrote: Simo Sorce wrote: On Thu, 2012-02-23 at 22:05 -0500, Rob Crittenden wrote: We noticed that older client machines couldn't join FreeIPA 2.1.90 servers running KDC 1.90. It was failing to return a ticket for DES so the whole keytab

Re: [Freeipa-devel] [PATCH] 965 Allow ipa-getkeytab to skip missing enctypes

2012-03-05 Thread Rob Crittenden
Simo Sorce wrote: On Fri, 2012-02-24 at 08:57 -0500, Rob Crittenden wrote: Simo Sorce wrote: On Thu, 2012-02-23 at 22:05 -0500, Rob Crittenden wrote: We noticed that older client machines couldn't join FreeIPA 2.1.90 servers running KDC 1.90. It was failing to return a ticket for DES so the

Re: [Freeipa-devel] [PATCH] 965 Allow ipa-getkeytab to skip missing enctypes

2012-02-24 Thread Rob Crittenden
Simo Sorce wrote: On Thu, 2012-02-23 at 22:05 -0500, Rob Crittenden wrote: We noticed that older client machines couldn't join FreeIPA 2.1.90 servers running KDC 1.90. It was failing to return a ticket for DES so the whole keytab request was failing. I changed it so failures are acceptable as

Re: [Freeipa-devel] [PATCH] 965 Allow ipa-getkeytab to skip missing enctypes

2012-02-23 Thread Simo Sorce
On Thu, 2012-02-23 at 22:05 -0500, Rob Crittenden wrote: We noticed that older client machines couldn't join FreeIPA 2.1.90 servers running KDC 1.90. It was failing to return a ticket for DES so the whole keytab request was failing. I changed it so failures are acceptable as long as one