Bug 1592961

Summary:	Need proper default subjectDN for CMC request authenticated through SharedToken
Product:	Red Hat Enterprise Linux 7	Reporter:	Christina Fu <cfu>
Component:	pki-core	Assignee:	Christina Fu <cfu>
Status:	CLOSED ERRATA	QA Contact:	Asha Akkiangady <aakkiang>
Severity:	urgent	Docs Contact:
Priority:	urgent
Version:	7.6	CC:	ekeck, gkapoor, mharmsen
Target Milestone:	rc	Keywords:	TestCaseProvided, ZStream
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	pki-core-10.5.9-2.el7	Doc Type:	Bug Fix
Doc Text:	Use Doc Text field in https://bugzilla.redhat.com/show_bug.cgi?id=1593585	Story Points:	---
Clone Of:
Clones:	1593585 (view as bug list)		Environment:
Last Closed:	2018-10-30 11:07:04 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1593585

Description Christina Fu 2018-06-19 16:44:45 UTC

This issue was reported by Gossamer per Common Criteria evaluation.

We need roper default subjectDN for CMC request authenticated through SharedToken.

Comment 5 Christina Fu 2018-06-20 16:13:28 UTC

commit 2746c4f70d738266b72161d80c1a2ff6a9a45391 (HEAD -> master, origin/master, origin/HEAD, ticket-3037-SharedTokenSbjdn-A-master)
Author: Christina Fu <cfu>
Date:   Tue Jun 19 15:21:54 2018 -0700

    Ticket 3037 CMC SharedToken SubjectDN default
    
    This patch adds proper subjectDN to CMC requests authenticated via ShardToken.
    Specifically, the AuthTokenSubjectNameDefault profile default is added to
    the default CMC profiles that authenticates via SharedToken.
    Code were added to ensure that the proper subjectDN retrieved from the
    mapped user entry is added to the AuthToken for such utilization.
    
    Fixes https://pagure.io/dogtagpki/issue/3037
    
    Change-Id: Id92d9496ab5b41ea7b5dcffb8d73d3ffe8b29fbc

Comment 7 Matthew Harmsen 2018-06-26 01:35:30 UTC

QE Test Verification:

https://bugzilla.redhat.com/show_bug.cgi?id=1593585#c3

Comment 9 Geetika Kapoor 2018-08-17 20:34:58 UTC

Test Env:

rpm -qa pki-ca
pki-ca-10.5.9-5.el7.noarch

Test Case:

Verified the scenario's mentioned in https://bugzilla.redhat.com/show_bug.cgi?id=1593585#c7

Comment 11 errata-xmlrpc 2018-10-30 11:07:04 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:3195