Actions
Bug #6205
closed
Custom SSL client cert for smart proxy based auth doesn't split CN correctly
Difficulty:
easy
Triaged:
Bugzilla link:
Pull request:
Description
https://bugzilla.redhat.com/show_bug.cgi?id=1108740
in app/controllers/concerns/foreman/controller/smart_proxy_auth.rb
dn is evaluating with this format on RHEL 6:
/C=US/ST=North Carolina/O=FOREMAN/OU=PUPPET/CN=satellite1.montleon.intra
but on RHEL 7 it is coming up as:
CN=satellite2.montleon.intra,OU=PUPPET,O=FOREMAN,ST=North Carolina,C=US
this is causing $1 one from the match above to be:
"satellite2.montleon.intra,OU=PUPPET,O=FOREMAN,ST=North"
by changing request_hosts = [$1] to request_hosts = [$1.gsub(/,(\S+)/i, '')] it seems to work around the issue. I'm not sure if this is the best approach to fixing it or if someone can foresee a better way.
Updated by Dominic Cleal almost 11 years ago
- Bugzilla link set to https://bugzilla.redhat.com/show_bug.cgi?id=1108740
Updated by Dominic Cleal almost 11 years ago
- Subject changed from Need to set restrict_registered_puppetmasters=false in foreman settings under auth in order for puppet runs to succeed on EL7 to Custom SSL client cert for smart proxy based auth doesn't split CN correctly
Updated by 
Updated by
Updated by The Foreman Bot over 10 years ago
- Status changed from New to Ready For Testing
- Target version set to 1.7.5
- Pull request https://github.com/theforeman/foreman/pull/1678 added
- Pull request deleted (
)
Updated by Andrew N over 10 years ago
- Status changed from Ready For Testing to Closed
- % Done changed from 0 to 100
Actions