From a7666aa3abcb872d4e5f169d4c6d9d60c3fc103e Mon Sep 17 00:00:00 2001
From: "Jason A. Smith" <smithj4@bnl.gov>
Date: Tue, 8 Jan 2019 11:26:38 -0500
Subject: [PATCH] Added more pkinit_* options.

---
 lenses/krb5.aug | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lenses/krb5.aug b/lenses/krb5.aug
index 734ddde9..46c22656 100644
--- a/lenses/krb5.aug
+++ b/lenses/krb5.aug
@@ -85,7 +85,8 @@ let appdefaults =
 let realms =
   let simple_option = /kdc|admin_server|database_module|default_domain/
       |/v4_realm|auth_to_local(_names)?|master_kdc|kpasswd_server/
-      |/admin_server|ticket_lifetime|pkinit_anchors|krb524_server/ in
+      |/admin_server|ticket_lifetime|pkinit_(anchors|identities|identity|pool)/
+      |/krb524_server/ in
   let subsec_option = /v4_instance_convert/ in
   let option = subsec_entry simple_option eq comment in
   let subsec = [ indent . key subsec_option . eq_openbr .
-- 
2.24.1