[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

PKINIT + heimdal snapshot: certificate authentication does not work


I'm trying to get Heimdal + PKINIT working. I have installed Heimdal and 
PKINIT according to  http://people.su.se/~lha/patches/heimdal/pkinit/ (latest 
heimdal snapshot + asn1-choice with the same date in file name).

Using kinit with password authentication works fine.
Unfortunately, when I try authenticate user with certificate, e.g.
$ kinit -C FILE:~/user.crt,~/user.key  user@LINDOM.PL
kinit returns:
kinit: Password incorrect

KDC log contains:
2004-08-24T17:22:29 AS-REQ user@LINDOM.PL from IPv4: for 
2004-08-24T17:22:29 Looking for PKINIT pa-data -- user@LINDOM.PL
2004-08-24T17:22:29 Failed to decode PKINIT PA-DATA -- user@LINDOM.PL
2004-08-24T17:22:29 Looking for ENC-TS pa-data -- user@LINDOM.PL
2004-08-24T17:22:29 No ENC-TS found -- user@LINDOM.PL
2004-08-24T17:22:29 sending 156 bytes to IPv4:

My question is: is it configuration problem or PKINIT with Heimdal snapshot 
doesn't work properly?