indigo-iam / iam

INDIGO Identity and Access Management Service
https://indigo-iam.github.io/
Other
99 stars 43 forks source link

allow X509 subject DNs to be presented also in the legacy format? #801

Open maarten-litmaath opened 6 days ago

maarten-litmaath commented 6 days ago

The X509 subject DN(s) of an account may need to be copy-pasted into other systems that expect the DN format to be what openssl uses e.g. on CentOS 7 and for which the arguments "-nameopt compat" are needed on newer OS versions. At least ALICE have such a use case. It would thus be great if the GUI presented the DNs also in the legacy format, if that is easy to implement.

Modern formats:

DC = ch, DC = cern, OU = Organic Units, OU = Users, CN = [...] CN=[...],OU=Users,OU=Organic Units,DC=cern,DC=ch

Legacy format:

/DC=ch/DC=cern/OU=Organic Units/OU=Users/CN=[...]

maarten-litmaath commented 6 days ago

A conversion script is easily written (example attached), but still an annoying extra step.

dn-convert-sh.txt