From a7666aa3abcb872d4e5f169d4c6d9d60c3fc103e Mon Sep 17 00:00:00 2001

From: "Jason A. Smith" <smithj4@bnl.gov>

Date: Tue, 8 Jan 2019 11:26:38 -0500

Subject: [PATCH] Added more pkinit_* options.

---

 lenses/krb5.aug | 3 ++-

 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lenses/krb5.aug b/lenses/krb5.aug

index 734ddde9..46c22656 100644

--- a/lenses/krb5.aug

+++ b/lenses/krb5.aug

@@ -85,7 +85,8 @@ let appdefaults =

 let realms =

   let simple_option = /kdc|admin_server|database_module|default_domain/

       |/v4_realm|auth_to_local(_names)?|master_kdc|kpasswd_server/

-      |/admin_server|ticket_lifetime|pkinit_anchors|krb524_server/ in

+      |/admin_server|ticket_lifetime|pkinit_(anchors|identities|identity|pool)/

+      |/krb524_server/ in

   let subsec_option = /v4_instance_convert/ in

   let option = subsec_entry simple_option eq comment in

   let subsec = [ indent . key subsec_option . eq_openbr .

-- 

2.24.1