Clarify certauth interface documentation Try to make it clearer that princ is the requested client principal, not a principal extracted from the certificate, and that the module must decode the certificate and inspect its attributes. Document KRB5_CERTAUTH_HWAUTH_PASS in certauth_plugin.h. https://github.com/krb5/krb5/commit/f5581b25d0476ec02c87e89b1211e8fd7659a57a Author: Greg Hudson Commit: f5581b25d0476ec02c87e89b1211e8fd7659a57a Branch: master doc/plugindev/certauth.rst | 21 ++++++++++++--------- src/include/krb5/certauth_plugin.h | 18 ++++++++++++------ 2 files changed, 24 insertions(+), 15 deletions(-)