69.4.

69.4.1.

図69.1

[D]

Copy to Clipboard Toggle word wrap

(ipacertmapdata=X509:<I>{issuer_dn!nss_x500}<S>{subject_dn!nss_x500})

(ipacertmapdata=X509:<I>{issuer_dn!nss_x500}<S>{subject_dn!nss_x500})

Copy to Clipboard Toggle word wrap

<ISSUER>CN=Smart Card CA,O=EXAMPLE.ORG

<ISSUER>CN=Smart Card CA,O=EXAMPLE.ORG

図69.2

[D]

Copy to Clipboard Copied! Toggle word wrap Toggle overflow
```
systemctl restart sssd
```
```
# systemctl restart sssd
```

69.4.2.

Copy to Clipboard Copied! Toggle word wrap Toggle overflow
```
kinit admin
```
```
# kinit admin
```

Copy to Clipboard Toggle word wrap

ipa certmaprule-add rule_name --matchrule '<ISSUER>CN=Smart Card CA,O=EXAMPLE.ORG' --maprule '(ipacertmapdata=X509:<I>{issuer_dn!nss_x500}<S>{subject_dn!nss_x500})'

# ipa certmaprule-add rule_name --matchrule '<ISSUER>CN=Smart Card CA,O=EXAMPLE.ORG' --maprule '(ipacertmapdata=X509:<I>{issuer_dn!nss_x500}<S>{subject_dn!nss_x500})'
-------------------------------------------------------
Added Certificate Identity Mapping Rule "rule_name"
-------------------------------------------------------
  Rule name: rule_name
  Mapping rule: (ipacertmapdata=X509:<I>{issuer_dn!nss_x500}<S>{subject_dn!nss_x500})
  Matching rule: <ISSUER>CN=Smart Card CA,O=EXAMPLE.ORG
  Enabled: TRUE

Copy to Clipboard Copied! Toggle word wrap Toggle overflow
```
systemctl restart sssd
```
```
# systemctl restart sssd
```

69.4.3.

Copy to Clipboard Toggle word wrap

cat idm_user_certificate.pem
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIBEjANBgkqhkiG9w0BAQsFADA6MRgwFgYDVQQKDA9JRE0u
RVhBTVBMRS5DT00xHjAcBgNVBAMMFUNlcnRpZmljYXRlIEF1dGhvcml0eTAeFw0x
ODA5MDIxODE1MzlaFw0yMDA5MDIxODE1MzlaMCwxGDAWBgNVBAoMD0lETS5FWEFN
[...output truncated...]

[root@server ~]# cat idm_user_certificate.pem
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIBEjANBgkqhkiG9w0BAQsFADA6MRgwFgYDVQQKDA9JRE0u
RVhBTVBMRS5DT00xHjAcBgNVBAMMFUNlcnRpZmljYXRlIEF1dGhvcml0eTAeFw0x
ODA5MDIxODE1MzlaFw0yMDA5MDIxODE1MzlaMCwxGDAWBgNVBAoMD0lETS5FWEFN
[...output truncated...]

図69.3

[D]
図69.4

[D]

Copy to Clipboard Copied! Toggle word wrap Toggle overflow
```
sss_cache -u idm_user
```
```
# sss_cache -u idm_user
```

Copy to Clipboard Toggle word wrap

ipa certmap-match idm_user_cert.pem

# ipa certmap-match idm_user_cert.pem
--------------
1 user matched
--------------
 Domain: IDM.EXAMPLE.COM
 User logins: idm_user
----------------------------
Number of entries returned 1
----------------------------

69.4.4.

Copy to Clipboard Copied! Toggle word wrap Toggle overflow
```
kinit admin
```
```
# kinit admin
```

Copy to Clipboard Toggle word wrap

CERT=$(openssl x509 -in idm_user_cert.pem -outform der|base64 -w0)
ipa user-add-certmapdata idm_user --certificate $CERT

# CERT=$(openssl x509 -in idm_user_cert.pem -outform der|base64 -w0)
# ipa user-add-certmapdata idm_user --certificate $CERT

Copy to Clipboard Toggle word wrap

ipa user-add-certmapdata idm_user --subject "O=EXAMPLE.ORG,CN=test" --issuer "CN=Smart Card CA,O=EXAMPLE.ORG"

# ipa user-add-certmapdata idm_user --subject "O=EXAMPLE.ORG,CN=test" --issuer "CN=Smart Card CA,O=EXAMPLE.ORG"
--------------------------------------------
Added certificate mappings to user "idm_user"
--------------------------------------------
  User login: idm_user
  Certificate mapping data: X509:<I>O=EXAMPLE.ORG,CN=Smart Card CA<S>CN=test,O=EXAMPLE.ORG

Copy to Clipboard Copied! Toggle word wrap Toggle overflow
```
sss_cache -u idm_user
```
```
# sss_cache -u idm_user
```

Copy to Clipboard Toggle word wrap

ipa certmap-match idm_user_cert.pem

# ipa certmap-match idm_user_cert.pem
--------------
1 user matched
--------------
 Domain: IDM.EXAMPLE.COM
 User logins: idm_user
----------------------------
Number of entries returned 1
----------------------------

69.4.1.

69.4.2.

69.4.3.

69.4.4.

詳細情報

試用、購入および販売

コミュニティー

Red Hat ドキュメントについて

多様性を受け入れるオープンソースの強化

会社概要

Theme

Red Hat legal and privacy links

Red Hat legal and privacy links