[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: More on pkinit and proxy certificates

31 jan 2007 kl. 01.03 skrev Athanasios Moralis:

> Hi all,
> I have a problem when using pkinit with a proxy certificate. Using  
> the normal certificate works fine.
> I am using the globus grid-proxy-init to produce the proxy  
> certificate:
>    root@black:~# grid-proxy-init -out /root/proxycert.pem
> This produces a file that has the proxy certificate, the proxy key  
> and the initial certificate.
> Then I execute
>    root@black:~# /usr/heimdal/bin/kinit -C FILE:/root/proxycert.pem  

Just checking, but have you turned on proxy certificates in krb5.conf ?

     pkinit_allow_proxy_certificate = yes

The error seems to indicate you have not done that.