[
https://issues.apache.org/jira/browse/KNOX-1072?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Larry McCay resolved KNOX-1072.
-------------------------------
Resolution: Fixed
> Add Client Cert Required Capability to KnoxToken
> ------------------------------------------------
>
> Key: KNOX-1072
> URL: https://issues.apache.org/jira/browse/KNOX-1072
> Project: Apache Knox
> Issue Type: Bug
> Reporter: Larry McCay
> Assignee: Larry McCay
>
> Token exchange is becoming a popular feature from Knox authentication
> services. Currently there is no way to establish and enforce the identities
> that are trusted to request a token for another given token or set of
> credentials.
> This change allows for a configured list of allowed principals to be
> validated against the SubjectDN of the client presented X509Certificate.
> By coupling this with KNOX-1051, we are able to have an authenticated channel
> over which a token may be acquired along with authorization checks.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
