Skip to content

Commit 73d1d49

Browse files
committed
Merge branch 'patricka-x509-inline-release-aio-july-updates' of https://github.com/PatAltimore/azure-docs-pr into patricka-x509-inline-release-aio-july-updates
2 parents 5084a23 + e17d3f4 commit 73d1d49

File tree

1 file changed

+16
-26
lines changed

1 file changed

+16
-26
lines changed

articles/iot-operations/manage-mqtt-broker/howto-configure-authentication.md

Lines changed: 16 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -152,7 +152,7 @@ BinaryData
152152

153153
### Certificate attributes
154154

155-
x509 attributes can be specified in the *BrokerListener* resource. For example, every client that has a certificate issued by the root CA `CN = Contoso Root CA Cert, OU = Engineering, C = US` or an intermediate CA `CN = Contoso Intermediate CA` receives the attributes listed.
155+
X509 attributes can be specified in the *BrokerAuthentication* resource. For example, every client that has a certificate issued by the root CA `CN = Contoso Root CA Cert, OU = Engineering, C = US` or an intermediate CA `CN = Contoso Intermediate CA` receives the attributes listed.
156156

157157
```yaml
158158
apiVersion: mq.iotoperations.azure.com/v1beta1
@@ -161,32 +161,22 @@ metadata:
161161
name: authn
162162
namespace: azure-iot-operations
163163
spec:
164-
listenerRef:
165-
- listener
166164
authenticationMethods:
167-
- custom:
168-
endpoint: https://auth-server-template
169-
caCert: custom-auth-ca
170-
auth:
171-
x509:
172-
secretName: custom-auth-client-cert
173-
namespace: azure-iot-operations
174-
x509:
175-
authorizationAttributes:
176-
root:
177-
subject = "CN = Contoso Root CA Cert, OU = Engineering, C = US"
178-
attributes:
179-
organization = contoso
180-
intermediate:
181-
subject = "CN = Contoso Intermediate CA"
182-
attributes:
183-
city = seattle
184-
foo = bar
185-
smart-fan:
186-
subject = "CN = smart-fan"
187-
attributes:
188-
building = 17
189-
```
165+
- x509Credentials:
166+
authorizationAttributes:
167+
root:
168+
subject = "CN = Contoso Root CA Cert, OU = Engineering, C = US"
169+
attributes:
170+
organization = contoso
171+
intermediate:
172+
subject = "CN = Contoso Intermediate CA"
173+
attributes:
174+
city = seattle
175+
foo = bar
176+
smart-fan:
177+
subject = "CN = smart-fan"
178+
attributes:
179+
building = 17
190180
191181
To learn about the attributes file syntax, see [Authorize clients that use X.509 authentication](./howto-configure-authorization.md#authorize-clients-that-use-x509-authentication).
192182

0 commit comments

Comments
 (0)