attribute to require pkinit?

[Nicolas Williams]

On Wed, Nov 29, 2006 at 02:06:05PM -0500, Sam Hartman wrote:
> >>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams at sun.com> writes:
>     Nicolas> Why is it difficult to implement?  Because of the LDAP
>     Nicolas> KDB backend?
> 
> More because of the kadm5 API and the db2 backend.
> I think the LDAP side is easy.

I don't get that -- what's wrong with using a TL data item for that?