<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hi Mike,<div><br></div><div> first of all i need to clarify that i'm not koji expert (as i said i'm using it only a few weeks).<br><div><br><div><div>On Dec 14, 2009, at 9:42 PM, Mike Bonnet wrote:</div><blockquote type="cite"><div><font class="Apple-style-span" color="#000000"><br></font>koji-hub already supports a DNUsernameComponent option. Rather than<br>introduce a new config option, I think I'd rather see<br>"DNUsernameComponent=DN" special-cased to mean "use the whole DN". I<br>don't see any env. vars other than DN that would be useful for<br>authentication.<br></div></blockquote></div><div>Hm that sounds like a cleaner approach! Thanks. I'm going to implemented probably later today...</div><div><br></div><div>One special case that i can think is if one would like to use the issuer's DN or any part of it but this is not the case for me so i can skip it.</div><div><br></div><div>One case that (i think) is not covered even from my approach though is the usage of an X509 extension of the certificate (i.e. the SubjectAlternativeNames) but for now i can live without them.</div><div> </div><div><br></div>Christos</div></div></body></html>