#3270 [RFE] Add PKINIT support to SSSD Kerberos proivder
Closed: Fixed Opened by jhrozek.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1405075

This is the client side ticket for the FreeIPA/IdM ticket
https://bugzilla.redhat.com/show_bug.cgi?id=1200767.
SSSD should be able to determine if pkinit is available for the user and prompt
for a Smartcard PIN if pkinit is available and a Smartcard is inserted or if
only pkinit if available for authentication.

Fields changed

blockedby: =>
blocking: =>
changelog: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
mark: no => 0
milestone: NEEDS_TRIAGE => SSSD 1.15 Beta
patch: => 0
review: True => 0
selected: =>
testsupdated: => 0

Fields changed

milestone: SSSD 1.16 Beta => SSSD 1.15.1
owner: somebody => sbose
patch: 0 => 1

master:
- 2d527aa
- 52f4583
- ead25e3
- 82c5971
- dd17a3a
- f70d946
- d475744
- 254f389
- 327a166
- f561c2b

resolution: => fixed
status: new => closed

Metadata Update from @jhrozek:
- Issue assigned to sbose
- Issue set to the milestone: SSSD 1.15.1

Additional patch
master:

  • bc07967636135e48252198936ac8975510918e99

Metadata Update from @lslebodn:
- Custom field component reset
- Custom field design_review reset
- Custom field mark reset
- Custom field patch adjusted to on (was: 1)
- Custom field review reset
- Custom field sensitive reset
- Custom field testsupdated reset
- Custom field type reset

SSSD is moving from Pagure to Github. This means that new issues and pull requests
will be accepted only in SSSD's github repository.

This issue has been cloned to Github and is available here:
- https://github.com/SSSD/sssd/issues/4303

If you want to receive further updates on the issue, please navigate to the github issue
and click on subscribe button.

Thank you for understanding. We apologize for all inconvenience.

Metadata