Hi Mike,

   first of all i need to clarify that i'm not koji expert (as i said i'm using it only a few weeks).

On Dec 14, 2009, at 9:42 PM, Mike Bonnet wrote:

koji-hub already supports a DNUsernameComponent option.  Rather than
introduce a new config option, I think I'd rather see
"DNUsernameComponent=DN" special-cased to mean "use the whole DN".  I
don't see any env. vars other than DN that would be useful for
authentication.
Hm that sounds like a cleaner approach! Thanks. I'm going to implemented probably later today...

One special case that i can think is if one would like to use the issuer's DN or any part of it but this is not the case for me so i can skip it.

One case that (i think) is not covered even from my approach though is the usage of an X509 extension of the certificate (i.e. the SubjectAlternativeNames) but for now i can live without them.
 

Christos