Re: Query: Need help for compiling with pkinit enabled.
On 09/03/2018 07:06 AM, Santosh Kumar wrote:
> Could you please help with information how can i enable and use pkinit.
From your description, my best guess is that you need to install the
OpenSSL development files so that PKINIT can be built. You didn't
mention what platform you are on; for Debian or Ubuntu this means
installing the libssl-dev package. You can check config.log (in the
directory where you ran configure) to see if PKINIT is enabled:
configure:12841: checking for a recent enough OpenSSL
[a couple of lines of building a test program]
configure:12862: result: yes
If PKINIT is being built but still isn't working, check the KDC logs (if
you control the KDC) for a message like "preauth pkinit failed to
initialize". On the client side, use "KRB5_TRACE=/dev/stdout kinit ..."
to look for messages about PKINIT failing on the client side.