freeipa/ipaserver/plugins
Rob Crittenden e4470f8165 User-defined certificate subjects
Let the user, upon installation, set the certificate subject base
for the dogtag CA. Certificate requests will automatically be given
this subject base, regardless of what is in the CSR.

The selfsign plugin does not currently support this dynamic name
re-assignment and will reject any incoming requests that don't
conform to the subject base.

The certificate subject base is stored in cn=ipaconfig but it does
NOT dynamically update the configuration, for dogtag at least. The
file /var/lib/pki-ca/profiles/ca/caIPAserviceCert.cfg would need to
be updated and pki-cad restarted.
2010-01-20 17:24:01 -05:00
..
__init__.py Remove deprecated comment on plugin naming conventions 2009-09-14 09:46:35 -04:00
dogtag.py Use the caIPAserviceCert profile for issuing service certs. 2010-01-08 13:36:16 -07:00
join.py Make hosts more like real services so we can issue certs for host principals 2009-12-16 19:26:59 -07:00
ldap2.py Allow cospriority to be updated and fix description of priority ordering 2010-01-19 17:02:13 -05:00
ldapapi.py Fix password setting on python 2.4 systems (it doesn't like None for oldpw) 2009-05-21 22:43:10 -04:00
rabase.py Make NotImplementedError in rabase return the correct function name 2009-11-19 16:18:45 -05:00
selfsign.py User-defined certificate subjects 2010-01-20 17:24:01 -05:00
xmlserver.py Add mod_python adapter and some UI tuning 2009-10-27 21:38:13 -06:00