diff options
| author | Ade Lee <alee@redhat.com> | 2012-02-16 14:38:40 -0500 |
|---|---|---|
| committer | Ade Lee <alee@redhat.com> | 2012-02-23 21:31:24 -0500 |
| commit | 1c4c45a87e62a74b68b7d235e94cfe5dc21b8da2 (patch) | |
| tree | ee413dd31d1a9d118c8c1367740ee95460919fae /pki/scripts/compose_ipa_pki_theme_packages | |
| parent | 0df68f85d453e5fb087a2cf04dc5d3ce4bcdff01 (diff) | |
| download | pki-1c4c45a87e62a74b68b7d235e94cfe5dc21b8da2.tar.gz pki-1c4c45a87e62a74b68b7d235e94cfe5dc21b8da2.tar.xz pki-1c4c45a87e62a74b68b7d235e94cfe5dc21b8da2.zip | |
Add client auth user to default install
When a subsystem is configured, a user is created to facilitate communication
between subsystems. This user is created on the security domain ca, and is
has the subsystem certificate in its user record.
This user will be reused as a user that can talk to the database using the
subsystem certificate for client auth. To do this, this patch does the following:
1. If not the security domain master CA, adds this user to the subsystem, and
adds the subsystem cert.
2. Adds the subsystem cert subject dn to the user's record in the seeAlso attribute
3. Adds acis for this user for the $basedn and for cn=config (for VLV searches)
By default, this user and acls will be added when the system is configured.
To actually use the user and client auth, more config steps are required. They
will be doc'ed in https://fedorahosted.org/pki/ticket/5
Diffstat (limited to 'pki/scripts/compose_ipa_pki_theme_packages')
0 files changed, 0 insertions, 0 deletions