Differentiate the ServiceTicket issued from Kinit vs PKinit

[Aravind Jerubandi]

Hello,

Today we use password based authentication (kinit). And we want to
introduce PKinit. But while validating ServiceTicket we would like to know
if the service ticket issued through Kinit to PKinit

Is there a way to find this?

If not, the other solution is to use different realms for Kinit and Pkinit.
But then we will have duplicate all the user and service principals for the
two realms. Is there any other easier solution?

Any help would be much appreciated.


-- 
Thanks,
Aravind