Re: More on pkinit and proxy certificates

[Love Hörnquist Åstrand <lha@kth.se>]

31 jan 2007 kl. 01.03 skrev Athanasios Moralis:

> Hi all,
> I have a problem when using pkinit with a proxy certificate. Using  
> the normal certificate works fine.
>
> I am using the globus grid-proxy-init to produce the proxy  
> certificate:
>    root@black:~# grid-proxy-init -out /root/proxycert.pem
> This produces a file that has the proxy certificate, the proxy key  
> and the initial certificate.
> Then I execute
>    root@black:~# /usr/heimdal/bin/kinit -C FILE:/root/proxycert.pem  
> root@GRIDCC.ORG

Just checking, but have you turned on proxy certificates in krb5.conf ?

[kdc]
     pkinit_allow_proxy_certificate = yes

The error seems to indicate you have not done that.

Love