freeipa

#6826 IdM Server Smart Cards: extdom: improve cert request
Closed: fixed Opened by tkrizek.

Closed: fixed
Reopen Issue

Related to https://pagure.io/freeipa/issue/6646

Certificates can be assigned to multiple user so the extdom plugin must
use sss_nss_getlistbycert() instead of sss_nss_getnamebycert() and
return a list of fully-qualified user names.

Due to issues on the SSSD side the current version of lookups by
certificates didn't work at all and the changes here won't break
existing clients.

Metadata Update from @tkrizek:
- Issue priority set to: 2
- Issue set to the milestone: FreeIPA 4.5.1

master:

  • ee455f163d756a6b71db8e999365139cad46c6ad extdom: do reverse search for domain separator
  • 8960398a57f69c124ec3105289dc355baa0d5b09 extdom: improve cert request

ipa-4-5:

  • 8046f9baab1e93b8b8e11d05088c8cdabdd47281 extdom: do reverse search for domain separator
  • a510a3d7e9f37e89acee84bed2363cb7f57fe88e extdom: improve cert request

Metadata Update from @tkrizek:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1402959
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
Low
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.