[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: More on pkinit and proxy certificates
31 jan 2007 kl. 01.03 skrev Athanasios Moralis:
> Hi all,
> I have a problem when using pkinit with a proxy certificate. Using
> the normal certificate works fine.
> I am using the globus grid-proxy-init to produce the proxy
> root@black:~# grid-proxy-init -out /root/proxycert.pem
> This produces a file that has the proxy certificate, the proxy key
> and the initial certificate.
> Then I execute
> root@black:~# /usr/heimdal/bin/kinit -C FILE:/root/proxycert.pem
Just checking, but have you turned on proxy certificates in krb5.conf ?
pkinit_allow_proxy_certificate = yes
The error seems to indicate you have not done that.