diff options
| author | Ade Lee <alee@redhat.com> | 2012-12-20 17:38:13 -0500 |
|---|---|---|
| committer | Ade Lee <alee@redhat.com> | 2013-01-15 09:28:38 -0500 |
| commit | 1cceecafb8050ec362a9c9568d36d52d3fe4117e (patch) | |
| tree | cc4019509f5befe6159b00e95a2fbbb9415df921 /base/ca/shared/webapps/ca/WEB-INF/auth.properties | |
| parent | d93a522df48a294018468c1db60f651e501ec458 (diff) | |
| download | pki-1cceecafb8050ec362a9c9568d36d52d3fe4117e.tar.gz pki-1cceecafb8050ec362a9c9568d36d52d3fe4117e.tar.xz pki-1cceecafb8050ec362a9c9568d36d52d3fe4117e.zip | |
Resolved Trac Ticket 367 - pkidestroy does not remove connector
* Added RESTful servlet to add/remove a KRA connector from the CA.
* Modified ACL to allow KRA subsystem user to remove connector.
* Modified connector code to allow the connector to be replaced without a server restart.
* Added functionality to pki CLI to add/remove connector
* Added code to pkidestroy to remove the connector (using both pki CLI and sslget)
When the issues with pki connection are resolved, we will use that method instead.
* Modified sslget to accept HTTP return codes != 200. In this case, we were returning
204 - which is perfectly legitimate.
Diffstat (limited to 'base/ca/shared/webapps/ca/WEB-INF/auth.properties')
| -rw-r--r-- | base/ca/shared/webapps/ca/WEB-INF/auth.properties | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/base/ca/shared/webapps/ca/WEB-INF/auth.properties b/base/ca/shared/webapps/ca/WEB-INF/auth.properties index 08f5bea50..b73b9ac10 100644 --- a/base/ca/shared/webapps/ca/WEB-INF/auth.properties +++ b/base/ca/shared/webapps/ca/WEB-INF/auth.properties @@ -8,6 +8,7 @@ account.login = certServer.ca.account,login account.logout = certServer.ca.account,logout admin.users = certServer.ca.users,execute admin.groups = certServer.ca.groups,execute +admin.kraconnector = certServer.ca.connectorInfo,modify agent.certrequests = certServer.ca.certrequests,execute agent.certs = certServer.ca.certs,execute securityDomain.installToken = certServer.securitydomain.domainxml,read |