Red Hat Summit 红帽全球峰会支持控制台（Console）开发人员开始试用联系人

11.4. Adding certificate mapping data to a user entry in the IdM web UI for users stored in IdM

  1. Log into the IdM web UI as an administrator.
  2. Navigate to Users Active users idm_user.
  3. Find the Certificate mapping data option and click Add.

  4. Choose one of the following options:

    • If you have the certificate of idm_user:

      1. On the command line, display the certificate using the cat utility or a text editor: 

        [root@server ~]# cat idm_user_certificate.pem
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIBEjANBgkqhkiG9w0BAQsFADA6MRgwFgYDVQQKDA9JRE0u
RVhBTVBMRS5DT00xHjAcBgNVBAMMFUNlcnRpZmljYXRlIEF1dGhvcml0eTAeFw0x
ODA5MDIxODE1MzlaFw0yMDA5MDIxODE1MzlaMCwxGDAWBgNVBAoMD0lETS5FWEFN
[...output truncated...]
      2. Copy the certificate.

      3. In the IdM web UI, click Add next to Certificate and paste the certificate into the window that opens up.

        图 11.3. Adding a user’s certificate mapping data: certificate

        Screenshot of a page displaying settings for the user
        • If you do not have the certificate of idm_user at your disposal but know the Issuer and the Subject of the certificate, check the radio button of Issuer and subject and enter the values in the two respective boxes.

        图 11.4. Adding a user’s certificate mapping data: issuer and subject

        Screenshot of the
  5. Click Add.

Verification

If you have access to the whole certificate in the .pem format, verify that the user and certificate are linked:

  1. Use the sss_cache utility to invalidate the record of idm_user in the SSSD cache and force a reload of the idm_user information: 

    # sss_cache -u idm_user

  2. Run the ipa certmap-match command with the name of the file containing the certificate of the IdM user: 

    # ipa certmap-match idm_user_cert.pem
--------------
1 user matched
--------------
 Domain: IDM.EXAMPLE.COM
 User logins: idm_user
----------------------------
Number of entries returned 1
----------------------------

    The output confirms that now you have certificate mapping data added to idm_user and that a corresponding mapping rule exists. This means that you can use any certificate that matches the defined certificate mapping data to authenticate as idm_user.

Red Hat logoGithubredditYoutubeTwitter

学习

尝试、购买和销售

社区

关于红帽文档

通过我们的产品和服务，以及可以信赖的内容，帮助红帽用户创新并实现他们的目标。 了解我们当前的更新.

让开源更具包容性

红帽致力于替换我们的代码、文档和 Web 属性中存在问题的语言。欲了解更多详情，请参阅红帽博客.

關於紅帽

我们提供强化的解决方案，使企业能够更轻松地跨平台和环境（从核心数据中心到网络边缘）工作。

Theme

© 2026 Red Hat返回顶部