RFE: Shared CA Enrollment Profiles

[pki-bot]

This issue was migrated from Pagure Issue #1067. Originally filed by cfu (@cfu) on 2014-07-07 18:21:02:

• Assigned to nobody

---

<This feature enhancement proposal has been spawned off from the "replication of new/modified profiles" design --
http://pki.fedoraproject.org/wiki/LDAP_Profile_Storage>

The purpose of this feature is to allow CAs within an organization to share a centralized set of enrollment profiles
(i.e. edit once, shared by many) while allow each CA instance to preserve the option to customize
their own profiles (e.g. departmental). With such feature in place, it will enable administrators to easily configure
a collection of globally shared profiles to enforce global policies and yet allow individual departments
to tailor its own set for their own needs.

Locations where the centralized/shared profile collection could reside include ldap server with the Security Domain. Locations where the local profiles could reside include files or ldap. However, a detailed design with more possibilities and details will be provided when this ticket is approved for investigation.

[pki-bot]

Comment from mharmsen (@mharmsen) at 2014-07-15 04:26:23

propose Milestone 10.3 or later

[pki-bot]

Comment from mharmsen (@mharmsen) at 2014-07-17 23:06:12

Per email discussions, propose Milestone 10.4.

[pki-bot]

Comment from cfu (@cfu) at 2017-02-27 14:00:09

Metadata Update from @cfu:

• Issue set to the milestone: UNTRIAGED