Re: [Freeipa-users] Kerberos and Cisco

2013-01-03 Thread Petr Spacek
On 12/23/2012 07:31 PM, Simo Sorce wrote: On Fri, 2012-12-21 at 18:23 -0500, Dmitri Pal wrote: On 12/21/2012 05:40 PM, Mike Mercier wrote: Hi Bret, I tried this once in the past with no success. If I recall correctly (I can't find the reference anymore), Cisco (at least in IOS 12.4 that I

Re: [Freeipa-users] Kerberos and Cisco

2012-12-23 Thread Simo Sorce
On Fri, 2012-12-21 at 18:23 -0500, Dmitri Pal wrote: On 12/21/2012 05:40 PM, Mike Mercier wrote: Hi Bret, I tried this once in the past with no success. If I recall correctly (I can't find the reference anymore), Cisco (at least in IOS 12.4 that I tested) only supports the

Re: [Freeipa-users] Kerberos and Cisco

2012-12-21 Thread Mike Mercier
Hi Bret, I tried this once in the past with no success. If I recall correctly (I can't find the reference anymore), Cisco (at least in IOS 12.4 that I tested) only supports the DES-CBC-CRC enctype. This enctype disabled by default in FreeIPA. Thanks, Mike On Fri, Dec 21, 2012 at 10:35 AM,

Re: [Freeipa-users] Kerberos and Cisco

2012-12-21 Thread Dmitri Pal
On 12/21/2012 05:40 PM, Mike Mercier wrote: Hi Bret, I tried this once in the past with no success. If I recall correctly (I can't find the reference anymore), Cisco (at least in IOS 12.4 that I tested) only supports the DES-CBC-CRC enctype. This enctype disabled by default in FreeIPA.

Re: [Freeipa-users] Kerberos and Cisco

2012-12-21 Thread Bret Wortman
Thanks, all. I'll report back. -- Bret Wortman http://bretwortman.com/ http://twitter.com/bretwortman On Friday, December 21, 2012 at 6:23 PM, Dmitri Pal wrote: On 12/21/2012 05:40 PM, Mike Mercier wrote: Hi Bret, I tried this once in the past with no success. If I recall