summaryrefslogtreecommitdiffstats
path: root/base/ca/shared/webapps
diff options
context:
space:
mode:
authorEndi Sukma Dewata <edewata@redhat.com>2012-08-03 09:55:53 -0500
committerEndi Sukma Dewata <edewata@vm-117.idm.lab.bos.redhat.com>2012-10-18 18:32:29 -0400
commitff635ba260970c911bd7d852574b0b2b643c4c97 (patch)
tree8f9e3340969951099c032f215be5876e7c720390 /base/ca/shared/webapps
parent3f169c70d0670d71fdf3bc61987f87bfab750f5f (diff)
downloadpki-ff635ba260970c911bd7d852574b0b2b643c4c97.tar.gz
pki-ff635ba260970c911bd7d852574b0b2b643c4c97.tar.xz
pki-ff635ba260970c911bd7d852574b0b2b643c4c97.zip
Enabled realm authentication for certificate requests.
The realm authentication on certificate request REST services has been enabled. Since now in the CLI the authentication is done using a separate login operation, it is now possible to POST the approval data without the problem related to chunked message. Ticket #300
Diffstat (limited to 'base/ca/shared/webapps')
-rw-r--r--base/ca/shared/webapps/ca/WEB-INF/auth.properties1
-rw-r--r--base/ca/shared/webapps/ca/WEB-INF/web.xml2
2 files changed, 2 insertions, 1 deletions
diff --git a/base/ca/shared/webapps/ca/WEB-INF/auth.properties b/base/ca/shared/webapps/ca/WEB-INF/auth.properties
index 21ec281da..116bc94bf 100644
--- a/base/ca/shared/webapps/ca/WEB-INF/auth.properties
+++ b/base/ca/shared/webapps/ca/WEB-INF/auth.properties
@@ -8,5 +8,6 @@
/ca/rest/account/logout = certServer.ca.account,logout
/ca/rest/admin/users = certServer.ca.users,execute
/ca/rest/admin/groups = certServer.ca.groups,execute
+/ca/rest/agent/certrequests = certServer.ca.certrequests,execute
/ca/rest/agent/certs = certServer.ca.certs,execute
/ca/rest/securityDomain/installToken = certServer.securitydomain.domainxml,read
diff --git a/base/ca/shared/webapps/ca/WEB-INF/web.xml b/base/ca/shared/webapps/ca/WEB-INF/web.xml
index 47ad924c5..286d1e33f 100644
--- a/base/ca/shared/webapps/ca/WEB-INF/web.xml
+++ b/base/ca/shared/webapps/ca/WEB-INF/web.xml
@@ -2414,7 +2414,7 @@
<security-constraint>
<web-resource-collection>
<web-resource-name>Agent Services</web-resource-name>
- <url-pattern>/rest/agent/certs/*</url-pattern>
+ <url-pattern>/rest/agent/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>*</role-name>