adding support to pkinit plugin for a PIN option?

[Greg Hudson]

On 05/13/2014 07:52 PM, Will Fiveash wrote:
> I would like to add support to the pkinit preauth plugin to support a
> PIN option in the pkinit_identity_opts.

We have support for doing this already via the responder:


http://web.mit.edu/kerberos/krb5-latest/doc/appdev/init_creds.html#user-interaction

Does this work for you?  I know it's a little more complicated, but we
haven't traditionally conveyed authentication secrets through preauth
options.