From 3d4db834caa0688bcefc0092b7978402b783eaf3 Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Thu, 14 May 2015 01:46:06 -0400 Subject: Add 'ca' plugin This commit adds the 'ca' plugin for creating and managing lightweight CAs. The initial implementation supports a single level of sub-CAs underneath the IPA CA. This commit also: - adds the container for FreeIPA CA objects - adds schema for the FreeIPA CA objects - updates ipa-pki-proxy.conf to allow access to the Dogtag lightweight CAs REST API. Part of: https://fedorahosted.org/freeipa/ticket/4559 Reviewed-By: Jan Cholasta Reviewed-By: Martin Babinsky --- ipalib/constants.py | 2 ++ 1 file changed, 2 insertions(+) (limited to 'ipalib') diff --git a/ipalib/constants.py b/ipalib/constants.py index 97dff1d80..05ba1adbb 100644 --- a/ipalib/constants.py +++ b/ipalib/constants.py @@ -122,6 +122,7 @@ DEFAULT_CONFIG = ( ('container_topology', DN(('cn', 'topology'), ('cn', 'ipa'), ('cn', 'etc'))), ('container_caacl', DN(('cn', 'caacls'), ('cn', 'ca'))), ('container_locations', DN(('cn', 'locations'), ('cn', 'etc'))), + ('container_ca', DN(('cn', 'cas'), ('cn', 'ca'))), # Ports, hosts, and URIs: ('xmlrpc_uri', 'http://localhost:8888/ipa/xml'), @@ -265,3 +266,4 @@ REPL_AGMT_STRIP_ATTRS = ('modifiersName', DOMAIN_SUFFIX_NAME = 'domain' CA_SUFFIX_NAME = 'ca' PKI_GSSAPI_SERVICE_NAME = 'dogtag' +IPA_CA_CN = u'ipa' -- cgit