Specify pkinit_principal_in_certificate

9 years ago · 61679fe4bf
parent c64f2d2b15
commit 61679fe4bf
1 changed files with 2 additions and 1 deletions
--- a/confskel/heimdal/kdc.conf
+++ b/confskel/heimdal/kdc.conf
@ -1,6 +1,7 @@
 [kdc]
    logging = FILE:/var/log/heimdal-kdc.log
    enable-pkinit = yes
+    pkinit_principal_in_certificate = no
    pkinit_identity = FILE:@@@KRBKDCPEMFILE@@@,@@@KRBKDCPEMKEYFILE@@@
    pkinit_anchors = FILE:@@@KRBPKIPEMFILE@@@
    pkinit_allow-proxy-certificate = false
@ -10,4 +11,4 @@
        dbname = ldap:@@@REALM_DCNAME@@@
        realm = @@@REALM_UCNAME@@@
        acl_file = /etc/heimdal-kdc/kadmind.acl
-    }
+    }