Add option [kdc]pki-allow-proxy-certificate=bool to allow using proxy certificate.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17287 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-04-26 18:42:48 +00:00
parent 53905171a0
commit 459f0648f1
1 changed files with 8 additions and 0 deletions
--- a/kdc/pkinit.c
+++ b/kdc/pkinit.c
@@ -1233,6 +1233,14 @@ _kdc_pk_initialize(krb5_context context,
 	return ret;
    }

+    ret = krb5_config_get_bool_default(context, 
+				       NULL,
+				       FALSE
+				       "kdc",
+				       "pki-allow-proxy-certificate",
+				       NULL);
+    _krb5_pk_allow_proxy_certificates(kdc_identity, ret);
+
    file = krb5_config_get_string_default(context, 
 					  NULL,
 					  HDB_DB_DIR "/pki-mapping",