diff options
| author | Fraser Tweedale <ftweedal@redhat.com> | 2016-04-11 12:42:35 +1000 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2016-06-09 09:04:27 +0200 |
| commit | 0d37d230c066f9eb703c81e0e21b1b6738703b41 (patch) | |
| tree | aad0e681086001dc07ab86a3806f12c4a416c5d5 /ipapython/install/cli.py | |
| parent | b584ffa4ac9c61bad9e4e05e5b39bd0503e39dcd (diff) | |
| download | freeipa-0d37d230c066f9eb703c81e0e21b1b6738703b41.tar.gz freeipa-0d37d230c066f9eb703c81e0e21b1b6738703b41.tar.xz freeipa-0d37d230c066f9eb703c81e0e21b1b6738703b41.zip | |
Optionally add service name to Custodia key DNs
Lightweight CAs support introduces new service principals for
Dogtag, with Custodia keys. The current Custodia key creation uses
a DN that contains only they key type and the hostname, so keys for
multiple services on the same host cannot be created.
Add the 'generate_keys' method to generate keys for a host or an
arbitrary service. When a service name is given, add the key
entries in a nested container with RDN 'cn=<service name>'. (The
container is assumed to exist).
This change does not affect searching because subtree search is
used, filtering on the ipaKeyUsage and memberPrincipal attributes.
Part of: https://fedorahosted.org/freeipa/ticket/4559
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'ipapython/install/cli.py')
0 files changed, 0 insertions, 0 deletions