attribute to require pkinit?

Nicolas Williams Nicolas.Williams at
Wed Nov 29 14:39:46 EST 2006

On Wed, Nov 29, 2006 at 02:06:05PM -0500, Sam Hartman wrote:
> >>>>> "Nicolas" == Nicolas Williams <Nicolas.Williams at> writes:
>     Nicolas> Why is it difficult to implement?  Because of the LDAP
>     Nicolas> KDB backend?
> More because of the kadm5 API and the db2 backend.
> I think the LDAP side is easy.

I don't get that -- what's wrong with using a TL data item for that?

More information about the krbdev mailing list