Kerberos KDC 1.11 added Camellia ciphers by default (also added to 1.9, but disabled). As they are not being enabled in IPA KDC, Fedora 19 ipa-getgeytab always prints errors:
$ ipa-getkeytab --keytab /tmp/foo.keytab --principal foo/host.example.test \ --server ipa.example.test Failed to retrieve encryption type Camellia-128 CTS mode with CMAC (#25) Failed to retrieve encryption type Camellia-256 CTS mode with CMAC (#26)
Related freeipa-devel thread.
Fix ipa-getkeytab to suppress the warnings.
attachment freeipa-rcrit-1103-camellia.patch
I split the LDAP updater changes into a separate ticket, https://fedorahosted.org/freeipa/ticket/3782
Moving open tickets to next month bucket.
Pushed to master: 198d82d
ipa-3-2: 4791bed
Metadata Update from @mkosek: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 3.2.x - 2013/07 (bug fixing)
Login to comment on this ticket.