libpam-krb5 on Ubuntu 8.04 with MIT Kerberos and PKINIT

Russ Allbery rra at
Thu May 15 16:30:26 EDT 2008

"Douglas E. Engert" <deengert at> writes:

> The pkinit would not work with the call krb5_get_init_creds_opt_init(opts)
> code being called. It looks like it sets the
> and thus looses the KRB5_GET_INIT_CREDS_OPT_EXTENDED flag. Not sure
> if krb5_get_init_creds_opt_set_pa failed or stored something.

Oh, okay.  In that case, I'm going to just drop this code completely,
since the only affected versions were MIT Kerberos 1.6 prior to the 1.6.3

Russ Allbery (rra at             <>

More information about the krbdev mailing list