summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorTimothy Pearson <[email protected]>2015-09-25 02:07:12 +0000
committerTimothy Pearson <[email protected]>2015-09-25 02:07:12 +0000
commit61679fe4bf96f0935b5ba341be083b0a0448d595 (patch)
tree17c1b4606e4d6336cd494351e77f3d3931e45d74
parentc64f2d2b15ea42ef4a99f74825c527b253626c72 (diff)
downloadkcmldapcontroller-61679fe4bf96f0935b5ba341be083b0a0448d595.tar.gz
kcmldapcontroller-61679fe4bf96f0935b5ba341be083b0a0448d595.zip
Specify pkinit_principal_in_certificate
-rw-r--r--confskel/heimdal/kdc.conf3
1 files changed, 2 insertions, 1 deletions
diff --git a/confskel/heimdal/kdc.conf b/confskel/heimdal/kdc.conf
index d7141a1..4a212ff 100644
--- a/confskel/heimdal/kdc.conf
+++ b/confskel/heimdal/kdc.conf
@@ -1,6 +1,7 @@
[kdc]
logging = FILE:/var/log/heimdal-kdc.log
enable-pkinit = yes
+ pkinit_principal_in_certificate = no
pkinit_identity = FILE:@@@KRBKDCPEMFILE@@@,@@@KRBKDCPEMKEYFILE@@@
pkinit_anchors = FILE:@@@KRBPKIPEMFILE@@@
pkinit_allow-proxy-certificate = false
@@ -10,4 +11,4 @@
dbname = ldap:@@@REALM_DCNAME@@@
realm = @@@REALM_UCNAME@@@
acl_file = /etc/heimdal-kdc/kadmind.acl
- } \ No newline at end of file
+ }