From 7b77de50a0fe055f3d0f3a5f5aaa719f9a97c6ae Mon Sep 17 00:00:00 2001
From: Love Hornquist Astrand <lha@h5l.org>
Date: Fri, 14 Oct 2011 14:53:50 +0200
Subject: [PATCH] kadmin modify --pkinit-acl example

---
 doc/setup.texi | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/doc/setup.texi b/doc/setup.texi
index 9c090b466..42cacdec8 100644
--- a/doc/setup.texi
+++ b/doc/setup.texi
@@ -1516,6 +1516,13 @@ lha@@EXAMPLE.ORG:CN=Love,UID=lha
 
 @subsection Using the Kerberos database
 
+You can also store the subject of the certificate in the principal
+entry in the kerberos database.
+
+@example
+kadmin modify --pkinit-acl="CN=baz,DC=test,DC=h5l,DC=se" user@@REALM
+@end example
+
 @section Use hxtool to create certificates
 
 @subsection Generate certificates
-- 
2.11.4.GIT