MacOSX 10.6 pkinit problem with 1.8.3 KDC

[Glenn Machin]

I am testing MacOSX 10.6 pkinit capabilities using a PIV card per the 
attached Apple pkinit configuration document.

When I test against the MIT 1.8.3 KDC using the command:
/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kinit -C 
KEYCHAIN: -D KEYCHAIN:

The MIT 1.8.3 KDC fails with error:
     cms_signeddata_verify: failed to decode message: 
error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

Using the MIT 1.8.3 kinit on the same Mac works fines.

Any idea what the problem might be?


Glenn