[23032] in Kerberos
Re: Cisco VPN 3000 series does not support preauth
daemon@ATHENA.MIT.EDU (Ken Raeburn)
Wed Dec 8 18:32:39 2004
In-Reply-To: <20041208224949.GD290@yiff.mit.edu>
Mime-Version: 1.0 (Apple Message framework v619)
Content-Type: text/plain; charset=US-ASCII; format=flowed
Message-Id: <57A63A02-4971-11D9-BB8C-000A95909EE2@mit.edu>
Content-Transfer-Encoding: 7bit
From: Ken Raeburn <raeburn@mit.edu>
Date: Wed, 8 Dec 2004 18:31:53 -0500
To: Rachel Elizabeth Dillon <red@mit.edu>
cc: "'kerberos@mit.edu'" <kerberos@mit.edu>
Errors-To: kerberos-bounces@mit.edu
On Dec 8, 2004, at 17:49, Rachel Elizabeth Dillon wrote:
> A colleague went and asked Cisco about the Kerberos preauthentication
> issue on VPN 3000 series hardware, and apparently they do not support
> preauthentication and do not intend to do so. I thought this might be
> useful to other people on this list, so I sent it along.
What kind of preauth? Compliance with RFC 1510 requires support for
encrypted-timestamp preauth.
Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
