libpam-krb5 on Ubuntu 8.04 with MIT Kerberos and PKINIT

[Russ Allbery]

"Douglas E. Engert" <deengert at anl.gov> writes:

> The pkinit would not work with the call krb5_get_init_creds_opt_init(opts)
> code being called. It looks like it sets the
> opt->flag = KRB5_GET_INIT_CREDS_OPT_CHG_PWD_PRMPT
> and thus looses the KRB5_GET_INIT_CREDS_OPT_EXTENDED flag. Not sure
> if krb5_get_init_creds_opt_set_pa failed or stored something.

Oh, okay.  In that case, I'm going to just drop this code completely,
since the only affected versions were MIT Kerberos 1.6 prior to the 1.6.3
pre-releases.

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>