PKINIT on MacOSX Maverick and Yosemite

[Greg Hudson]

On 01/18/2016 01:52 PM, Machin, Glenn D wrote:
> PKINIT  seems to only work using MacOSX kinit (/usr/bin/kinit) when the argument "--pk-use-enckey" is also passed.    There does not seem to be a corresponding krb5.conf setting for this argument.   Does anyone know a MacOSX krb5.conf setting that will do the same thing as --pk-use-enckey?

By my reading of the OS X Heimdal code, there is no equivalent krb5.conf
option.