URL:
https://github.com/SSSD/sssd/pull/137
Author: sumit-bose
Title: #137: Initial pkinit support
Action: opened
PR body:
"""
This series of patches add initial support for PKINIT
(
https://fedorahosted.org/sssd/ticket/3270) by forwarding the information about
the selected certificate from the Smartcard to the backends. Currently only
the krb5 backend supports Smartcard authentication the other backends will
return an error code which will tell the PAM responder to fall back to local
Smartcard authentication as it is currently the case.
Testing requires a working PKINIT setup which e.g. can be done with AD by
setting up a CA and generating certificates as described in
https://fedorahosted.org/sssd/wiki/DesignDocs/SmartcardAuthenticationTest....
But currently more important is regression testing, i.e. making sure all other
authentication methods are still working as expected.
"""
To pull the PR as Git branch:
git remote add ghsssd
https://github.com/SSSD/sssd
git fetch ghsssd pull/137/head:pr137
git checkout pr137