From 459f0648f1f26cd0ec163017149fe7c5c304f87f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Wed, 26 Apr 2006 18:42:48 +0000
Subject: [PATCH] Add option [kdc]pki-allow-proxy-certificate=bool to allow
 using proxy certificate.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17287 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 kdc/pkinit.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/kdc/pkinit.c b/kdc/pkinit.c
index fe0cc6db6..fba4c5a76 100644
--- a/kdc/pkinit.c
+++ b/kdc/pkinit.c
@@ -1233,6 +1233,14 @@ _kdc_pk_initialize(krb5_context context,
 	return ret;
     }
 
+    ret = krb5_config_get_bool_default(context, 
+				       NULL,
+				       FALSE
+				       "kdc",
+				       "pki-allow-proxy-certificate",
+				       NULL);
+    _krb5_pk_allow_proxy_certificates(kdc_identity, ret);
+
     file = krb5_config_get_string_default(context, 
 					  NULL,
 					  HDB_DB_DIR "/pki-mapping",