Proposal: krb5_get_init_creds_opt_set_change_password_prompt

[Kevin Coffman]

On 12/7/06, Douglas E. Engert <deengert at anl.gov> wrote:
> If you take out the pa_type, then you would have the
> -pp option I was talking about, and  I would suspect get
> around Sam's objections about OpenSSL/pkinit specifics.
> I suspose the -pp could have the pa_data type too.

Agreed.  I thought it was looking for trouble to assume we could get
all current and future preauth types (and implementations) to agree
what attribute "foo" means.  To me, it seems ambitious enough to get
all pkinit implementations to agree.  But maybe I'm just being
pessimistic.