pac-attribute
Use the pac-attribute entry to indicate which STSUU attribute in the RSTR contains a PAC to be used for authentication. Remove this configuration entry if we do not want to allow authentication using a PAC.
pac-attribute = attribute_name
Description
If this entry is set, the appliance searches for a PAC in the STSUU. The PAC takes precedence over all other authentication data. If a PAC is present, it will be used without further changes. If this entry is not configured, a PAC cannot be used to authenticate the user.
Options
attribute_name The name of the PAC attribute to be extracted from the RSTR.
Usage: Optional
Default value
am-pac
Example:
pac-attribute = am-pac