[Samba] [Announce] Samba 4.7.0 Available - PKINIT support for smart cards with MIT Krb?

[Andrew Bartlett]

On Tue, 2017-10-31 at 23:34 +0100, Karel Lang AFD via samba wrote:
> Hi,
> 
> i have a question regarding the smart card support in connection with 
> this announcement:
> 
>  > Samba AD with MIT Kerberos
> --------------------------
>  > Missing features, compared to Heimdal, are:
>  >    * PKINIT support
>  >    * S4U2SELF/S4U2PROXY support
>  >    * RODC support (not fully working with Heimdal either)
> 
> Does it mean the "PKINIT support" will never be a part of the Samba 4 
> with MIT Kerberos, or there is chance the support will be added in future?

It would require development, if this is important to you in a
restricted timeframe then you may wish to assist with that.

Otherwise in general: the folks from Red Hat who have done the work are
intending to close the feature gap in time.

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   
https://catalyst.net.nz/services/samba