MacOSX 10.6 pkinit problem with 1.8.3 KDC
Glenn Machin
gmachin at sandia.gov
Fri Dec 17 23:33:14 EST 2010
I am testing MacOSX 10.6 pkinit capabilities using a PIV card per the
attached Apple pkinit configuration document.
When I test against the MIT 1.8.3 KDC using the command:
/System/Library/PrivateFrameworks/Heimdal.framework/Helpers/kinit -C
KEYCHAIN: -D KEYCHAIN:
The MIT 1.8.3 KDC fails with error:
cms_signeddata_verify: failed to decode message:
error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag
Using the MIT 1.8.3 kinit on the same Mac works fines.
Any idea what the problem might be?
Glenn
More information about the Kerberos
mailing list