pkinit updates

[Russ Allbery]

Douglas E Engert <deengert at anl.gov> writes:
> Jeffrey Hutzelman wrote:

>> That depends on one's PAM module.  But currently, if one's PAM module 
>> does not provide a way to specify the principal, then it must infer it 
>> from PAM_USER. 

> Is now the time to get Russ to add a prompt for principal to his
> pam? Its someting that has ben missing for years.

I can certainly add that as an option if anyone wants it.  I'm guessing
that one wouldn't want to prompt by default, and I'd need some help
understanding the desired semantics and use case.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>