[SSSD-users] Re: SSSD and PKI: capability of checking trust/validation/revocation

2020-03-03 Thread Hristina Marosevic
Hello, Thank you for information. I can use this options (OCSP URL, trust cert location) once I make SSSD derive public keys from user certificate which is a problem that I can not solve, so far. The default mapping of the user certificate is from userCertificate;binary LDAP attribute to SSSD

[SSSD-users] Re: SSSD and PKI: capability of checking trust/validation/revocation

2020-03-03 Thread Sumit Bose
On Tue, Mar 03, 2020 at 04:38:16PM -, Hristina Marosevic wrote: > Hello, > > Thank you for information. I can use this options (OCSP URL, trust cert > location) once I make SSSD derive public keys from user certificate which is > a problem that I can not solve, so far. > The default

[SSSD-users] Re: SSSD and PKI: capability of checking trust/validation/revocation

2020-03-03 Thread Hristina Marosevic
Hello, I forgot to mention the LDAP implementation I am using - it is OUD (Oracle Unified Directory). Object class "strongAuthenticationUser" was added to the users for PKI based authentication. The mandatory attribute od this object class is "userCertificate" or "userCertificate;binary" in