internet/ansible-freeipa
4
0
Fork 0
mirror of https://github.com/freeipa/ansible-freeipa.git synced 2026-06-11 03:05:54 +00:00
Code Issues Projects Releases Wiki Activity

Install ipaserver without ca

Browse Source
This commit is contained in:
Samuel Veloso
2020-05-26 16:26:18 +02:00
committed by Thomas Woerner
parent 44af47d93a
commit 4221213f1e
11 changed files with 220 additions and 31 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
tests/ca-less/certificates/pkinit/extensions.conf Normal file
View File

@@ -0,0 +1,20 @@
[kdc_cert]
basicConstraints=CA:FALSE
keyUsage=nonRepudiation,digitalSignature,keyEncipherment,keyAgreement
extendedKeyUsage=1.3.6.1.5.2.3.5
subjectKeyIdentifier=hash
authorityKeyIdentifier=keyid,issuer
issuerAltName=issuer:copy
subjectAltName=otherName:1.3.6.1.5.2.2;SEQUENCE:kdc_princ_name
[kdc_princ_name]
realm=EXP:0,GeneralString:${ENV::REALM}
principal_name=EXP:1,SEQUENCE:kdc_principal_seq
[kdc_principal_seq]
name_type=EXP:0,INTEGER:1
name_string=EXP:1,SEQUENCE:kdc_principals
[kdc_principals]
princ1=GeneralString:krbtgt
princ2=GeneralString:${ENV::REALM}