freeipa

Clone
Source Code
GIT

#5099 Add permission for user to bypass caacl enforcement
Closed: Fixed None Opened 8 years ago by ftweedal.

Closed: Fixed
Reopen Issue

Currently, even if a principal has permission to write the userCertificate
attribute of principal(s), cert-request will deny certificate issuance unless
there is a caacl rule allowing it. This affects even admin.

Add a permission that suppresses caacl enforcement in cert-request, of which
admin is a member.

Discussion on freeipa-devel: https://www.redhat.com/archives/freeipa-devel/2015-July/msg00110.html

didn't go trough proper triage

Ticket has been cloned to Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1250145

master:

  • 6fa14fd Add permission for bypassing CA ACL enforcement

ipa-4-2:

  • ef8f431 Add permission for bypassing CA ACL enforcement

Metadata Update from @ftweedal:
- Issue assigned to ftweedal
- Issue set to the milestone: FreeIPA 4.2.1
7 years ago

Login to comment on this ticket.

Metadata
None
None
None
important
None
None
None
None
enhancement
None
None
Certificate management
None
1
None
None
mbabinsk
None
https://bugzilla.redhat.com/show_bug.cgi?id=1250145
None
None
None
Powered by Pagure 5.13.3
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.