Re: [Fed-Talk] Pkinit working on Snow Leopard but need forwardable TGT
Re: [Fed-Talk] Pkinit working on Snow Leopard but need forwardable TGT
- Subject: Re: [Fed-Talk] Pkinit working on Snow Leopard but need forwardable TGT
- From: Joel Rennich <email@hidden>
- Date: Wed, 19 Jan 2011 15:41:19 -0600
- Delivered-to: email@hidden
- Delivered-to: email@hidden
On Jan 19, 2011, at 7:24 AM, Glenn Machin wrote:
> Using the information on the attached guide I am able to login to my MacBook Pro with a Gemalto USB .NET smartcard and I authenticate to ActiveDirectory using PKINIT. The problem is the TGT is not forwardable even though the /Library/Preferences/edu.mit.Kerberos config file calls for a forwardable TGT. (see attached screenshot)
>
> What config file or plist tells pkinit to get a forwardable TGT?
The documentation that you referenced was a work in progress.
For a variety of reasons, including the ones that Mr. Disiena has referenced, we highly recommend against using this for any purpose.
At this time if you need a PKINIT solution, we'd suggest that you look towards third party solutions.
Thanks,
Joel Rennich
Consulting Engineering Manager
US Commercial and Government Sales
Apple _______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden