[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Problem installing pkinit

25 okt 2006 kl. 14.26 skrev Athanasios Moralis:

> and I found that if I put pkinit_require_eku=false I have a  
> successful logging. :-)
> Setting win2k_pkinit_require_binding = yes did not affect the result.
> This is something that I should really look into it. Perhaps my  
> certificate
> does not support eku or something else is happening.

Yes, the RFC specifices a that the KDC to have PK-INIT KDC EKU set
on it, I guess I should add a warning kdc startup code hinting that
not having the EKU will cause interrop problems.