Hi Mike,
first of all i need to clarify that i'm not koji expert (as i said
i'm using it only a few weeks).
On Dec 14, 2009, at 9:42 PM, Mike Bonnet wrote:
koji-hub already supports a DNUsernameComponent option. Rather than
introduce a new config option, I think I'd rather see
"DNUsernameComponent=DN" special-cased to mean "use the whole DN".
I
don't see any env. vars other than DN that would be useful for
authentication.
Hm that sounds like a cleaner approach! Thanks. I'm going to
implemented probably later today...
One special case that i can think is if one would like to use the
issuer's DN or any part of it but this is not the case for me so i can
skip it.
One case that (i think) is not covered even from my approach though is
the usage of an X509 extension of the certificate (i.e. the
SubjectAlternativeNames) but for now i can live without them.
Christos