2015-05-08 13:39:29 -04:00
|
|
|
[global]
|
|
|
|
|
server_version = "IPAKeys/0.0.1"
|
|
|
|
|
server_socket = $IPA_CUSTODIA_SOCKET
|
|
|
|
|
auditlog = $IPA_CUSTODIA_AUDIT_LOG
|
|
|
|
|
|
|
|
|
|
[auth:simple]
|
2021-06-11 08:32:25 +02:00
|
|
|
handler = ipaserver.custodia.httpd.authenticators.SimpleCredsAuth
|
2016-03-22 09:40:43 +01:00
|
|
|
uid = $UID
|
|
|
|
|
gid = $GID
|
2015-05-08 13:39:29 -04:00
|
|
|
|
|
|
|
|
[auth:header]
|
2021-06-11 08:32:25 +02:00
|
|
|
handler = ipaserver.custodia.httpd.authenticators.SimpleHeaderAuth
|
2015-05-08 13:39:29 -04:00
|
|
|
header = GSS_NAME
|
|
|
|
|
|
|
|
|
|
[authz:kemkeys]
|
2016-11-22 17:55:10 +01:00
|
|
|
handler = ipaserver.secrets.kem.IPAKEMKeys
|
2015-05-08 13:39:29 -04:00
|
|
|
paths = /keys
|
|
|
|
|
store = ipa
|
2017-11-08 15:15:30 +01:00
|
|
|
server_keys = $IPA_CUSTODIA_KEYS
|
2015-05-08 13:39:29 -04:00
|
|
|
|
|
|
|
|
[store:ipa]
|
2016-11-22 17:55:10 +01:00
|
|
|
handler = ipaserver.secrets.store.IPASecStore
|
2015-05-08 13:39:29 -04:00
|
|
|
ldap_uri = $LDAP_URI
|
|
|
|
|
|
|
|
|
|
[/keys]
|
2021-06-11 08:32:25 +02:00
|
|
|
handler = ipaserver.custodia.secrets.Secrets
|
2015-05-08 13:39:29 -04:00
|
|
|
allowed_keytypes = kem
|
|
|
|
|
store = ipa
|
