thus enabling user-to-user authentication. I believe that this should

be the default and that -u should turn it off, but for the time being
this is good enough for testing.

bjaspan: added the -u option which turns *on* the DUPLICATE_SKEY bit,

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@1013 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/clients/kinit/kinit.c b/src/clients/kinit/kinit.c
index 39149ec48a104276e3b9bc300ce2aa89a37a115c..ed451fb3c15974e649b07bee9451f1e03f7a8058 100644 (file)
--- a/src/clients/kinit/kinit.c
+++ b/src/clients/kinit/kinit.c
@@ -69,11 +69,14 @@ main(argc, argv)
     if (rindex(argv[0], '/'))
        argv[0] = rindex(argv[0], '/')+1;
 
-    while ((option = getopt(argc, argv, "rpl:c:")) != EOF) {
+    while ((option = getopt(argc, argv, "rpul:c:")) != EOF) {
        switch (option) {
        case 'r':
            options |= KDC_OPT_RENEWABLE;
            break;
+        case 'u':
+           options |= KDC_OPT_DUPLICATE_SKEY;
+           break;
        case 'p':
            options |= KDC_OPT_PROXIABLE;
            break;
@@ -108,7 +111,7 @@ main(argc, argv)
        errflg++;
     
     if (errflg) {
-       fprintf(stderr, "Usage: %s [ -rp ] [ -l lifetime ] [ -c cachename ] principal\n", argv[0]);
+       fprintf(stderr, "Usage: %s [ -rpu ] [ -l lifetime ] [ -c cachename ] principal\n", argv[0]);
        exit(2);
     }
     if (ccache == NULL) {