[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: cisco enctypes trouble
On 25 Nov 1999, Assar Westerlund wrote:
> So in this case I would suggest just having a des-cbc-crc key for
> `host/my-cisco-router'. (I know the UI for this is kind of
> suboptimal.) If there only is a `des-cbc-crc' key, kinit should still
> get a des3-cbc-sha1 ticket for `krbtgt/REALM@REALM' but only a
> `des-cbc-crc' key for `host/my-cisco-router'. Can you try doing that
> and see if it just works for you?
shut down kdc. dumped database to file. edited file and removed all other
enctypes than des-cbc-crc for host/my-cisco-router. load file into
database. start up kdc.
kinit gets des3-cbc-sha1. telnet gets des-cbc-crc. cisco happy. sysadmin happy.
> If you do, I might implement a better command in `kadmin'. :-)
That would be nice.
Jakob Schlyter <email@example.com> Network Analyst
Phone: +46 31-772 59 19 Computer Communications Group
Fax: +46 31-772 59 22 Chalmers University of Technology
http://www.cdg.chalmers.se/~jakob/ SE-412 96 Goteborg, Sweden