I have another questions. to compile KDC with kkdcp support, do I need pass in any special flag(s)? Or kkdcp is supported by default in recent code? The reason I ask this question, is that when I run a test: (I do have kdc = https://.... configured for the realm). It does not seem to make https connection to the server. Here is the trace log:
host:~/test/bin] kdct$ env KRB5_TRACE=/dev/stdout ./kinit xxx@*** init module "encrypted_timestamp", pa_type 2, flag 1 init module "encrypted_challenge", pa_type 138, flag 1 pkinit_init_plg_crypto: initializing openssl crypto context at 0x1c829e0 pkinit_client_plugin_init: returning plgctx at 0x1c67b40 init module "pkinit", pa_type 17, flag 1 init module "pkinit", pa_type 16, flag 1 init module "pkinit", pa_type 15, flag 1 init module "pkinit", pa_type 14, flag 1 init module "pkinit", pa_type 147, flag 130 pkinit_init_req_crypto: returning ctx at 0x1c67770 pkinit_init_identity_crypto: returning ctx at 0x1c84210 pkinit_client_req_init: returning reqctx at 0x1c67730 get_plugin_data_sym(service_locator) kinit: Cannot contact any KDC for realm 'APPLECONNECT.APPLE.COM' while getting initial credentials pkinit_client_plugin_fini: got plgctx at 0x1c67b40 Jim ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos