#1067 RFE: Shared CA Enrollment Profiles
Closed: migrated 3 years ago by dmoluguw. Opened 9 years ago by cfu.

<This feature enhancement proposal has been spawned off from the "replication of new/modified profiles" design -- <a href="http://pki.fedoraproject.org/wiki/LDAP_Profile_Storage">http://pki.fedoraproject.org/wiki/LDAP_Profile_Storage>

The purpose of this feature is to allow CAs within an organization to share a centralized set of enrollment profiles
(i.e. edit once, shared by many) while allow each CA instance to preserve the option to customize
their own profiles (e.g. departmental). With such feature in place, it will enable administrators to easily configure
a collection of globally shared profiles to enforce global policies and yet allow individual departments
to tailor its own set for their own needs.

Locations where the centralized/shared profile collection could reside include ldap server with the Security Domain. Locations where the local profiles could reside include files or ldap. However, a detailed design with more possibilities and details will be provided when this ticket is approved for investigation.


propose Milestone 10.3 or later

Per email discussions, propose Milestone 10.4.

Metadata Update from @cfu:
- Issue set to the milestone: UNTRIAGED

7 years ago

Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new
issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.

This issue has been cloned to GitHub and is available here:
https://github.com/dogtagpki/pki/issues/1631

If you want to receive further updates on the issue, please navigate to the
GitHub issue and click on Subscribe button.

Thank you for understanding, and we apologize for any inconvenience.

Metadata Update from @dmoluguw:
- Issue close_status updated to: migrated
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata