diff --git a/confskel/heimdal/kdc.conf b/confskel/heimdal/kdc.conf
index d7141a1..4a212ff 100644
--- a/confskel/heimdal/kdc.conf
+++ b/confskel/heimdal/kdc.conf
@@ -1,6 +1,7 @@
[kdc]
logging = FILE:/var/log/heimdal-kdc.log
enable-pkinit = yes
+ pkinit_principal_in_certificate = no
pkinit_identity = FILE:@@@KRBKDCPEMFILE@@@,@@@KRBKDCPEMKEYFILE@@@
pkinit_anchors = FILE:@@@KRBPKIPEMFILE@@@
pkinit_allow-proxy-certificate = false
@@ -10,4 +11,4 @@
dbname = ldap:@@@REALM_DCNAME@@@
realm = @@@REALM_UCNAME@@@
acl_file = /etc/heimdal-kdc/kadmind.acl
- }
\ No newline at end of file
+ }
|