[SmartcardServices-Users] Pkinit working on MacOSX 10.9.5 or 10.10?

[Yoann Gini]

> Le 29 août 2015 à 23:30, Glenn Machin <gmachin at sandia.gov> a écrit :
> 
> The only way I can see a Kerberos AS_REQ using PKINIT is using the command line "kinit -C KEYCHAIN: ».

Same behaviors here. I’m not able to use standard system in PKINIT system.

> Has anyone got PKINIT working via OpenDirectory  during login or via pam modules (pam_opendirectory or pam_krb5)?
> 
> Shame I don't see Apple publishing documents describing how to enable pkinit given federal government requirements for use of smartcards.
> Seems like its the users helping users, while Apple keeps quiet.

The only advice I can tell is to use Centrify Express. It’s free, it works, and it will be quick for you.

Best regards,
Yoann Gini