[23031] in Kerberos
Re: Cisco VPN 3000 series does not support preauth
daemon@ATHENA.MIT.EDU (Garrett Wollman)
Wed Dec 8 18:15:55 2004
From: wollman@lcs.mit.edu (Garrett Wollman)
Date: Wed, 8 Dec 2004 23:14:17 +0000 (UTC)
Message-ID: <cp81s9$123r$1@grapevine.lcs.mit.edu>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
In article <20041208224949.GD290@yiff.mit.edu>,
Rachel Elizabeth Dillon <red@MIT.EDU> wrote:
>A colleague went and asked Cisco about the Kerberos preauthentication
>issue on VPN 3000 series hardware, and apparently they do not support
>preauthentication and do not intend to do so. I thought this might be
>useful to other people on this list, so I sent it along.
Hardware or software preauth?
Cisco definitely does support software preauth in the VPN 3005 that we
have; I know because I wasted quite a bit of time getting them to fix
it so that it worked with anything other than des-cbc-* keys. Our VPN
users depend on this to log in, so it would be an unpleasant surprise
if it stopped working.
-GAWollman
--
Garrett A. Wollman | As the Constitution endures, persons in every
wollman@lcs.mit.edu | generation can invoke its principles in their own
Opinions not those of| search for greater freedom.
MIT, LCS, CRS, or NSA| - A. Kennedy, Lawrence v. Texas, 539 U.S. ___ (2003)
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
