<div id="reply-content">
Thanks, all. I'll report back.
</div><div id="reply-content"><br></div>
<div id="CEE57702393D453ABE22EA1627C11A2E"><div><br></div>-- <br>Bret Wortman<br>http://bretwortman.com/<br>http://twitter.com/bretwortman<div><br></div></div>
<p style="color: #A0A0A8;">On Friday, December 21, 2012 at 6:23 PM, Dmitri Pal wrote:</p>
<blockquote type="cite" style="border-left-style:solid;border-width:1px;margin-left:0px;padding-left:10px;">
<div id="quoted-message-content"><div>
<meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type">
On 12/21/2012 05:40 PM, Mike Mercier wrote:
<blockquote type="cite"><div>
<div dir="ltr">Hi Bret,
<div><br>
</div>
<div style="">I tried this once in the past with no success. If
I recall correctly (I can't find the reference anymore), Cisco
(at least in IOS 12.4 that I tested) only supports the
DES-CBC-CRC enctype. This enctype disabled by default in
FreeIPA.</div>
</div>
</div></blockquote><br>
allow_weak_crypto = true <br>
<br>
in krb5.conf to enable it.<br>
<br><blockquote type="cite"><div>
<div dir="ltr">
<div style=""><br>
</div>
<div style="">Thanks,</div>
<div style="">Mike</div>
</div>
<div><br>
<br>
<div>On Fri, Dec 21, 2012 at 10:35 AM, Bret
Wortman <span dir="ltr"><<a moz-do-not-send="true" href="mailto:bret.wortman@damascusgrp.com" target="_blank">bret.wortman@damascusgrp.com</a>></span>
wrote:<br><blockquote type="cite"><div>My network
guy wants to use our FreeIPA server to authenticate users on
Cisco devices, but when we tried to import the keytab, it
balked on every one of the keys.
<div>
<br>
</div>
<div>Has anyone done this? Any pointers if so?</div>
<div><br>
</div>
<div>Thanks, and happy holidays!</div>
<span><font color="#888888">
<div><br clear="all">
<div><br>
</div>
-- <br>
<div>Bret Wortman</div>
<div>The Damascus Group</div>
<div>Fairfax, VA</div>
<div><a moz-do-not-send="true" href="http://bretwortman.com/" target="_blank">http://bretwortman.com/</a></div>
<div><a moz-do-not-send="true" href="http://twitter.com/BretWortman" target="_blank">http://twitter.com/BretWortman</a></div>
</div>
</font></span><br>
_______________________________________________<br>
Freeipa-users mailing list<br>
<a moz-do-not-send="true" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a><br>
<a moz-do-not-send="true" href="https://www.redhat.com/mailman/listinfo/freeipa-users" target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
</div></blockquote></div>
<br>
</div>
<br>
<fieldset></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</div></blockquote><br>
<br>
<pre cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
<div>_______________________________________________</div><div>Freeipa-users mailing list</div><div>Freeipa-users@redhat.com</div><div>https://www.redhat.com/mailman/listinfo/freeipa-users</div></div></div>
</blockquote>
<div>
<br>
</div>