>I worked through a bunch of this for pam-krb5 back in the day and made it >support a set of reasonable things, including anonymous PKINIT to >establish the FAST armor. People who are working in this area may find >its source code useful to look at, although I think there have been >improvements since then and what it does may no longer be best practice. > >https://github.com/rra/pam-krb5/blob/main/module/fast.c
Thanks, Russ! I will definitely use this as a starting point sometime in the future. --Ken ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
