summaryrefslogtreecommitdiffstats
path: root/base/ca/shared/conf/acl.ldif
Commit message (Collapse)AuthorAgeFilesLines
* Add updateDomainXML to admin interfaceAde Lee2013-02-111-1/+1
|
* Resolved Trac Ticket 367 - pkidestroy does not remove connectorAde Lee2013-01-151-1/+1
| | | | | | | | | | | * Added RESTful servlet to add/remove a KRA connector from the CA. * Modified ACL to allow KRA subsystem user to remove connector. * Modified connector code to allow the connector to be replaced without a server restart. * Added functionality to pki CLI to add/remove connector * Added code to pkidestroy to remove the connector (using both pki CLI and sslget) When the issues with pki connection are resolved, we will use that method instead. * Modified sslget to accept HTTP return codes != 200. In this case, we were returning 204 - which is perfectly legitimate.
* Enabled realm authentication for certificate requests.Endi Sukma Dewata2012-10-221-0/+1
| | | | | | | | | The realm authentication on certificate request REST services has been enabled. Since now in the CLI the authentication is done using a separate login operation, it is now possible to POST the approval data without the problem related to chunked message. Ticket #300
* Added REST account service.Endi Sukma Dewata2012-10-221-0/+1
| | | | | | | | | A REST account service has been added to allow client to login to establish a session and to logout to destroy the session. This way multiple operations can be executed using the same session without having to re-authenticate. Ticket #357
* Enabled SSL authenticator and PKI realm.Endi Sukma Dewata2012-08-031-0/+3
| | | | | | | | | | | The SSL connection has been configured with clientAuth="want" so users can choose whether to provide a client certificate or username and password. The authentication and authorization will be handled by the SSL authenticator with fallback and PKI realm. New access control rules have been added for users, groups, and certs REST services. Ticket #107
* Removed unnecessary pki folder.Endi Sukma Dewata2012-03-261-0/+53
Previously the source code was located inside a pki folder. This folder was created during svn migration and is no longer needed. This folder has now been removed and the contents have been moved up one level. Ticket #131