[SmartcardServices-Users] OS X 10.9 Smart Card Logon But No PKINIT
Henry B Hotz
hbhotz at oxy.edu
Mon May 19 13:31:15 PDT 2014
On May 16, 2014, at 3:23 PM, Yoann Gini <yoann.gini at gmail.com> wrote:
>> I got the error “kinit: krb5_pk_enterprise_certs: Failed to find PKINIT certificate: Certificate not found”. The smart card I am using for this is the DoD CAC.
> I’ve got this problem too. I’ve found (via reverse engineering) that the Kerberos framework has some problems in the algo used to validate the certificate on the card. It seems to see it but don’t take it as valid.
Alexander's cert ought to be OK since it's at least recognized, but I've seen a similar apparent mis-match in processing the KDC reply from a Heimdal KDC. I suspect the problem is a mis-match between Apple's PKI framework and Heimdal.
Personal email. hbhotz at oxy.edu
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the SmartcardServices-Users