1 |
--- |
2 |
|
3 |
# Fill in the Master Portal DN. This is going to be trusted by the MyProxy |
4 |
# Credential Store. This is generally the hostcert DN of the Master Portal |
5 |
|
6 |
credstore_accepted_credentials: "/C=NL/O=Example/OU=Org/CN=masterportal" |
7 |
credstore_authorized_retrievers: "/C=NL/O=Example/OU=Org/CN=masterportal" |
8 |
credstore_authorized_renewers: "/C=NL/O=Example/OU=Org/CN=masterportal" |
9 |
credstore_trusted_retrievers: "/C=NL/O=Example/OU=Org/CN=masterportal" |
10 |
|
11 |
# Fill in authorized DN prefix if you want to enable self-renewal of |
12 |
# the stored certificates |
13 |
|
14 |
self_authorized_renewers: "/DC=NL/DC=DemoCA/O=*" |
15 |
|
16 |
# Maximum lifetime of issued proxies by the Credential Store |
17 |
|
18 |
credstore_max_proxy_lifetime: 264 |
19 |
|
20 |
# IP address of the Master Portal trusted by this Credential Store (only |
21 |
# used for IP table rules. Ignore this if Credential Store is running |
22 |
# on the same host as the Master Portal |
23 |
|
24 |
# masterportal_address: 123.123.123.123 |
25 |
|