Now files downloadable, thanks.
One more question. What you meant under "If you already have a working pkinit
configuration not additional configuration is needed"?
I can run kinit, enter the password and to receive kerberos ticket, but can't get
ticket using token. Is that enough, or i need to set up reciving kerberos ticket using
token first?
PS. Maybe intresting link to add to this wiki (about cert maping, in AD)
https://fedorahosted.org/sssd/wiki/DesignDocs/SmartcardAuthenticationTest...
https://blogs.technet.microsoft.com/askds/2009/08/10/mapping-one-smartcar...