Write out remaining appdefaults entries on client

9 years ago · 7ebf958b10
parent 53a442c926
commit 7ebf958b10
1 changed files with 6 additions and 3 deletions
--- a/src/libtdeldap.cpp
+++ b/src/libtdeldap.cpp
@ -4908,6 +4908,9 @@ int LDAPManager::writeClientKrb5ConfFile(LDAPClientRealmConfig clientRealmConfig
 			stream << "    pkinit_revoke = FILE:" << ldap_crlfile << "\n";
 		}
 		stream << "    pkinit_require_crl_checking = true\n";
+		stream << "    pam = {\n";
+		stream << "        pkinit_user = PKCS11:" << TDECryptographicCardDevice::pkcsProviderLibrary() << "\n";
+		stream << "    }\n";
 		stream << "\n";

 		// Defaults