bx509d: /get-tgt add EKU to authorization check

2021-04-16 14:12:40 -05:00
parent eb2d1029c2
commit f60300984e
2 changed files with 5 additions and 1 deletions
@@ -435,6 +435,7 @@ $klist || { echo "failed to setup kimpersonate credentials"; exit 2; }

 echo "Fetch TGT"
 (set -vx; csr_grant pkinit foo@${R} foo@${R})
+(set -vx; csr_grant eku 1.3.6.1.5.2.3.4 foo@${R})
 token=$(KRB5CCNAME=$cache $gsstoken HTTP@$server)
 if ! (set -vx;
    curl -o "${cachefile2}" -Lgsf                                       \