[PATCH] 223 Fix identities for agents in new DRM rest services
Fix identities for security data storage, retrieval and generation For the new security data storage and retrieval, and for symmetric key generation, we need to store the identity of the agent that is requesting and approving each operation, both in the ldap record and in the audit logs. (Tickets 806 and 807) This patch also adds required logic to check that the owner of the recovery request is the same agent that retrieves the key. It also adds missing audit log constants for symmmetric key generation so that they will show up in the audit log. Please review. Thanks, Ade
acked by Jack with some minor changes. Pushed to master. On Wed, 2014-06-11 at 12:21 -0400, Ade Lee wrote:
Fix identities for security data storage, retrieval and generation
For the new security data storage and retrieval, and for symmetric key generation, we need to store the identity of the agent that is requesting and approving each operation, both in the ldap record and in the audit logs. (Tickets 806 and 807)
This patch also adds required logic to check that the owner of the recovery request is the same agent that retrieves the key. It also adds missing audit log constants for symmmetric key generation so that they will show up in the audit log.
Please review. Thanks,
Ade _______________________________________________ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel
participants (1)
-
Ade Lee