summaryrefslogtreecommitdiff
path: root/doc/html/_sources/admin/admin_commands/kadmin_local.txt
diff options
context:
space:
mode:
Diffstat (limited to 'doc/html/_sources/admin/admin_commands/kadmin_local.txt')
-rw-r--r--doc/html/_sources/admin/admin_commands/kadmin_local.txt7
1 files changed, 7 insertions, 0 deletions
diff --git a/doc/html/_sources/admin/admin_commands/kadmin_local.txt b/doc/html/_sources/admin/admin_commands/kadmin_local.txt
index 50c3b99ea428..9b5ccf4e911a 100644
--- a/doc/html/_sources/admin/admin_commands/kadmin_local.txt
+++ b/doc/html/_sources/admin/admin_commands/kadmin_local.txt
@@ -661,6 +661,13 @@ KDC:
*principal*. The *value* is a JSON string representing an array
of objects, each having optional ``type`` and ``username`` fields.
+**pkinit_cert_match**
+ Specifies a matching expression that defines the certificate
+ attributes required for the client certificate used by the
+ principal during PKINIT authentication. The matching expression
+ is in the same format as those used by the **pkinit_cert_match**
+ option in :ref:`krb5.conf(5)`. (New in release 1.16.)
+
This command requires the **modify** privilege.
Alias: **setstr**