mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-11-02 20:30:26 -06:00
Sumit Bose
c4156041fe
This patch add a certauth plugin which allows the IPA server to support PKINIT for certificates which do not include a special SAN extension which contains a Kerberos principal but allow other mappings with the help of SSSD's certmap library. Related to https://pagure.io/freeipa/issue/4905 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: David Kupka <dkupka@redhat.com>
6 lines
89 B
Plaintext
6 lines
89 B
Plaintext
[plugins]
|
|
certauth = {
|
|
module = ipakdb:@plugindir@/ipadb.so
|
|
enable_only = ipakdb
|
|
}
|