On Thu, Mar 16, 2017 at 05:50:37PM +1000, Fraser Tweedale wrote:
On Tue, Mar 07, 2017 at 11:16:37AM +1000, Fraser Tweedale wrote:
> Hi team,
>
> Please review the attached patches, which add support for external
> authentication (e.g. GSS-API/SPNEGO).
>
> These patches depend on some other outstanding patches:
> 0157, 0158, 0165, 0166.
>
> You can review the whole branch (including those commits just
> mentioned) on GitHub:
>
https://github.com/dogtagpki/pki/compare/master...frasertweedale:feature/...
>
> Thanks!
> Fraser
7 patches acked by alee; pushed to master:
67d51413323e1d55fdc04ca5edf5d9f05afb0ebe Update ACLInterceptor to support external
principals
ef84ef36be06944a7f6338ed022f13e066cd5c32 Update SessionContextInterceptor to handle
external principals
76f60251f7e1b2f1f9ad1752121c0c5cb1cb5b8b Update AuthMethodInterceptor to handle external
principals
433c7b70d7dd8609dea31b28aee042e48a41ac9f Add IAuthToken implementation for external
principals
00cf1cd2c6b9f5d8116921e4c3f1d07e7708388e Add groups and request attributes to external
principals
4cf87aa3babc4c7d8ea60a46cb548ebfee493ae4 CertProcessor: extract method
setAuthTokenIntoRequest
295cb2f175711a85f371c0fa93c584ad235066e4 Define AgentCertAuthentication token keys in
IAuthToken
Thanks,
Fraser
Remaining commits pushed to master:
* b099b631bb49e17e0aa4cd8c7a818ba1c923ec92 Add authn manager that reuses auth token from
session
* dcc42ad4ed7fcbc566b7cf7ce1cbfae93b24a9a9 Add ExternalProcessConstraint for request
validation
* f67071910c6b74790f7ad75329f05e599076dee4 CertProcessor: set external principal
attributes into request
* a35c6cde1047e305142bec839b8953d90008c127 Allow arbitrary user data in cert request