- added passkey detection based on the presence of ipaPassKey attribute in the LDAP entry of the principal - added 'passkey' authentication indicator - added support for enforcing KDC policy based on the 'passkey' indicator Fixes: https://pagure.io/freeipa/issue/9263 Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>