<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
On 12/21/2012 05:40 PM, Mike Mercier wrote:
<blockquote
cite="mid:CAC8eoxkY3KDNFNUPNxzhVZRD2q-TEN8Urx3tcJK2PkfthnwfkA@mail.gmail.com"
type="cite">
<div dir="ltr">Hi Bret,
<div><br>
</div>
<div style="">I tried this once in the past with no success. If
I recall correctly (I can't find the reference anymore), Cisco
(at least in IOS 12.4 that I tested) only supports the
DES-CBC-CRC enctype. This enctype disabled by default in
FreeIPA.</div>
</div>
</blockquote>
<br>
allow_weak_crypto = true <br>
<br>
in krb5.conf to enable it.<br>
<br>
<blockquote
cite="mid:CAC8eoxkY3KDNFNUPNxzhVZRD2q-TEN8Urx3tcJK2PkfthnwfkA@mail.gmail.com"
type="cite">
<div dir="ltr">
<div style=""><br>
</div>
<div style="">Thanks,</div>
<div style="">Mike</div>
</div>
<div class="gmail_extra"><br>
<br>
<div class="gmail_quote">On Fri, Dec 21, 2012 at 10:35 AM, Bret
Wortman <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:bret.wortman@damascusgrp.com" target="_blank">bret.wortman@damascusgrp.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">My network
guy wants to use our FreeIPA server to authenticate users on
Cisco devices, but when we tried to import the keytab, it
balked on every one of the keys.
<div>
<br>
</div>
<div>Has anyone done this? Any pointers if so?</div>
<div><br>
</div>
<div>Thanks, and happy holidays!</div>
<span class="HOEnZb"><font color="#888888">
<div><br clear="all">
<div><br>
</div>
-- <br>
<div>Bret Wortman</div>
<div>The Damascus Group</div>
<div>Fairfax, VA</div>
<div><a moz-do-not-send="true"
href="http://bretwortman.com/" target="_blank">http://bretwortman.com/</a></div>
<div><a moz-do-not-send="true"
href="http://twitter.com/BretWortman"
target="_blank">http://twitter.com/BretWortman</a></div>
</div>
</font></span><br>
_______________________________________________<br>
Freeipa-users mailing list<br>
<a moz-do-not-send="true"
href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a><br>
<a moz-do-not-send="true"
href="https://www.redhat.com/mailman/listinfo/freeipa-users"
target="_blank">https://www.redhat.com/mailman/listinfo/freeipa-users</a><br>
</blockquote>
</div>
<br>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Freeipa-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Freeipa-users@redhat.com">Freeipa-users@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/freeipa-users">https://www.redhat.com/mailman/listinfo/freeipa-users</a></pre>
</blockquote>
<br>
<br>
<pre class="moz-signature" cols="72">--
Thank you,
Dmitri Pal
Sr. Engineering Manager for IdM portfolio
Red Hat Inc.
-------------------------------
Looking to carve out IT costs?
<a class="moz-txt-link-abbreviated" href="http://www.redhat.com/carveoutcosts/">www.redhat.com/carveoutcosts/</a>
</pre>
</body>
</html>