Hi Oliver Thanks for the hints. For question #2: I created two new stacks (RA Operator with Client Certificate and CA Operator with Client Certificate) In the corresponding handlers I set a static role. Now I can select the role by choosing one of the two authentication methods – this works like expected – cool
Best Regards Thomas From: Oliver Welter <[email protected]> Sent: Freitag, 25. August 2023 17:02 To: [email protected] Subject: Re: [OpenXPKI-users] general questions Hi Thomas, On 25.08.23 12:28, Thomas Gusset wrote: Hi I have not found answers to the following questions in the documentation. Can anyone help me? 1. How can I add the IP address of the requesting device of an EST enrolment request to the meta data? how to add the IP to the workflow was discussed on the list last week, you then need to feed this as "extra data" do the metadata activities in the workflow (editing the workflow def) either as static item or feed it through the profile specific metadata generator and also add it to the required profiles. 1. Is it possible to assign more than one role to a user? I use client certificates to authenticate and would like to switch between RA Operator and CA Operator No - you can have different authentication stacks and have the same user in them but the approach with the userdb you presented here this week does not support mutiple roles. Oliver Thanks Thomas NetSec.co AG Thomas Gusset CEO & CTO Im alten Riet 125, 9494 Schaan, Liechtenstein https://netsec.co +423 388 2777 / +423 388 2770 (direkt) [email protected]<mailto:[email protected]> https://threema.id/NK3MJMNP Chat on MS Teams<https://teams.microsoft.com/l/chat/0/[email protected]> _______________________________________________ OpenXPKI-users mailing list [email protected]<mailto:[email protected]> https://lists.sourceforge.net/lists/listinfo/openxpki-users -- Protect your environment - close windows and adopt a penguin!
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
