[sssd PR#671][opened] PAM: use PKCS#11 URIs to restrict certificate selection

[sumit-bose]

URL: https://github.com/SSSD/sssd/pull/671
Author: sumit-bose
 Title: #671: PAM: use PKCS#11 URIs to restrict certificate selection
Action: opened

PR body:
"""
With the new option 'p11_uri' to the PAM responder can be used to restrict the
selection of certificates in p11_child with the help of a PKCS#11 URI.

The implementation of for the NSS version of p11_child is not available in this
PR. As you can see in the first patch the support for PKCS#11 URIs in NSS is
limited and I have to talk to NSS developers first if this will change of if it
would make more sense to use the PKCS#11 URI calls form libp11kit for the NSS
version as well.

To avoid rebase issues this PR is already on top of PR#668.

Related to https://pagure.io/SSSD/sssd/issue/3814
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/671/head:pr671
git checkout pr671

[sssd PR#671][comment] PAM: use PKCS#11 URIs to restrict certificate selection

[jhrozek]

URL: https://github.com/SSSD/sssd/pull/671
Title: #671: PAM: use PKCS#11 URIs to restrict certificate selection

jhrozek commented:
"""
retest this please
"""

See the full comment at https://github.com/SSSD/sssd/pull/671#issuecomment-428355961

[sssd PR#671][comment] PAM: use PKCS#11 URIs to restrict certificate selection

[jhrozek]

URL: https://github.com/SSSD/sssd/pull/671
Title: #671: PAM: use PKCS#11 URIs to restrict certificate selection

jhrozek commented:
"""
All these patches were added to PR #668 so we can close this one as superseded, right? (I would prefer to close this one because #668 has already the whole conversation)
"""

See the full comment at https://github.com/SSSD/sssd/pull/671#issuecomment-428531864

[sssd PR#671][comment] PAM: use PKCS#11 URIs to restrict certificate selection

[sumit-bose]

URL: https://github.com/SSSD/sssd/pull/671
Title: #671: PAM: use PKCS#11 URIs to restrict certificate selection

sumit-bose commented:
"""
Ok, let's track it in #668.
"""

See the full comment at https://github.com/SSSD/sssd/pull/671#issuecomment-428592757

[sssd PR#671][closed] PAM: use PKCS#11 URIs to restrict certificate selection

[sumit-bose]

URL: https://github.com/SSSD/sssd/pull/671
Author: sumit-bose
 Title: #671: PAM: use PKCS#11 URIs to restrict certificate selection
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/671/head:pr671
git checkout pr671