Hi all, Jason found the problem.the various defaults were still pointing at "REQUIRED" and I only tried to override SEC_CLIENT_AUTHENTICATION = OPTIONAL on the schedd side but also needed both SEC_CLIENT_INTEGRITY = OPTIONAL and SEC_CLIENT_ENCRYPTION = OPTIONAL as otherwise the resulting policy would again be "REQUIRED".
Thanks a lot! Cheers Carsten -- Dr. Carsten Aulbert, Max Planck Institute for Gravitational Physics, CallinstraÃe 38, 30167 Hannover, Germany, Phone +49 511 762 17185
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature