freeipa

Clone
Source Code
GIT

#6425 Extend CA ACLs to allow external principals as operator or subject
Opened 7 years ago by ftweedal. Modified 3 years ago

Open
Close issue as:
fixed wontfix worksforme duplicate insufficientinfo invalid

Related to: https://fedorahosted.org/freeipa/ticket/6424

We may also want to allow external principals as operator, e.g. allow a group of users from trusted AD realm to issue certs to themselves or certain IPA users/hosts/services or external subjects.

Related discussion: https://gist.github.com/frasertweedale/6093f2312d16b3958374cc15b55b4d63

Metadata Update from @ftweedal:
- Issue assigned to ftweedal
- Issue set to the milestone: Future Releases
7 years ago

Metadata Update from @ftweedal:
- Assignee reset
3 years ago

Metadata Update from @ftweedal:
- Issue close_status updated to: None
- Issue tagged with: rfe
3 years ago

Log in to comment on this ticket.

Metadata
None

rfe

None
None
normal
None
None
None
None
enhancement
https://fedorahosted.org/freeipa/ticket/6424
None
Certificate management
None
None
None
None
None
None
None
None
None
Powered by Pagure 5.14.1
Documentation • File an Issue • About • SSH Hostkey/Fingerprint
© Red Hat, Inc. and others.