[RFE] Add PKINIT support to SSSD Kerberos proivder

[sssd-bot]

Cloned from Pagure issue: https://pagure.io/SSSD/sssd/issue/3270

• Created at 2016-12-15 16:25:07 by jhrozek
• Closed as Fixed
• Assigned to sbose
• Associated bugzillas
  • https://bugzilla.redhat.com/show_bug.cgi?id=1405075

---

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1405075

This is the client side ticket for the FreeIPA/IdM ticket
https://bugzilla.redhat.com/show_bug.cgi?id=1200767.

SSSD should be able to determine if pkinit is available for the user and prompt
for a Smartcard PIN if pkinit is available and a Smartcard is inserted or if
only pkinit if available for authentication.

Comments

---

Comment from jhrozek at 2016-12-15 16:30:18

Fields changed

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
mark: no => 0
milestone: NEEDS_TRIAGE => SSSD 1.15 Beta
patch: => 0
review: True => 0
selected: =>
testsupdated: => 0

---

Comment from jhrozek at 2017-02-06 15:37:00

Fields changed

milestone: SSSD 1.16 Beta => SSSD 1.15.1
owner: somebody => sbose
patch: 0 => 1

---

Comment from jhrozek at 2017-02-23 10:57:21

master:
- 2d527aa
- 52f4583
- ead25e3
- 82c5971
- dd17a3a
- f70d946
- d475744
- 254f389
- 327a166
- f561c2b

resolution: => fixed
status: new => closed

---

Comment from jhrozek at 2017-02-24 14:33:27

Metadata Update from @jhrozek:

• Issue assigned to sbose
• Issue set to the milestone: SSSD 1.15.1

---

Comment from lslebodn at 2017-02-28 23:40:42

Additional patch
master:

• bc07967

---

Comment from lslebodn at 2017-02-28 23:40:50

Metadata Update from @lslebodn:

• Custom field component reset
• Custom field design_review reset
• Custom field mark reset
• Custom field patch adjusted to on (was: 1)
• Custom field review reset
• Custom field sensitive reset
• Custom field testsupdated reset
• Custom field type reset