Re: Clear as mud: PKINIT and -nokey principal addition (krb5-1.13)

2015-01-05 Thread Siddharth Mathur
> > It might help to try deploying to a regular Unix client, to help > distinguish between client-side issues with the iOS Kerberos > implementation (which I'm not very familiar with) and server-side issues. Thanks for debugging tips Greg, will try them out ASAP and report back. Overall, does wha

Re: Clear as mud: PKINIT and -nokey principal addition (krb5-1.13)

2015-01-05 Thread Greg Hudson
On 01/05/2015 03:24 AM, Siddharth Mathur wrote: > Despite deploying the right kind of client certificates on my mobile > devices (iOS) and using the right type of certificate on the KDC, I am > not sure if they are talking certificates at all. How do I debug if > the certificate matching rules are

Clear as mud: PKINIT and -nokey principal addition (krb5-1.13)

2015-01-05 Thread Siddharth Mathur
Hello all, My aim is to use krb5-1.13 with its PKINIT capability to configure password-less authentication of mobile devices. Additionally, I intend my application servers running HTTP to use SPNEGO/Negotiate to verify authenticity of the aforementioned devices for service authorisation. Despite