URL:
https://github.com/freeipa/freeipa/pull/4355
Author: tiran
Title: #4355: Allow hosts to read DNS records for IP SAN
Action: opened
PR body:
"""
For SAN IPAddress extension the cert plugin verifies that the IP address
matches the host entry. Certmonger uses the host principal to
authenticate and retrieve certificates. But the host principal did not
have permission to read DNS entries from LDAP.
Allow all hosts to read some entries from active DNS records.
Fixes:
https://pagure.io/freeipa/issue/8098
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/4355/head:pr4355
git checkout pr4355