From 61679fe4bf96f0935b5ba341be083b0a0448d595 Mon Sep 17 00:00:00 2001 From: Timothy Pearson Date: Fri, 25 Sep 2015 02:07:12 +0000 Subject: [PATCH] Specify pkinit_principal_in_certificate --- confskel/heimdal/kdc.conf | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/confskel/heimdal/kdc.conf b/confskel/heimdal/kdc.conf index d7141a1..4a212ff 100644 --- a/confskel/heimdal/kdc.conf +++ b/confskel/heimdal/kdc.conf @@ -1,6 +1,7 @@ [kdc] logging = FILE:/var/log/heimdal-kdc.log enable-pkinit = yes + pkinit_principal_in_certificate = no pkinit_identity = FILE:@@@KRBKDCPEMFILE@@@,@@@KRBKDCPEMKEYFILE@@@ pkinit_anchors = FILE:@@@KRBPKIPEMFILE@@@ pkinit_allow-proxy-certificate = false @@ -10,4 +11,4 @@ dbname = ldap:@@@REALM_DCNAME@@@ realm = @@@REALM_UCNAME@@@ acl_file = /etc/heimdal-kdc/kadmind.acl - } \ No newline at end of file + }