You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/iot-operations/manage-mqtt-broker/howto-configure-authentication.md
+16-26Lines changed: 16 additions & 26 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -152,7 +152,7 @@ BinaryData
152
152
153
153
### Certificate attributes
154
154
155
-
x509 attributes can be specified in the *BrokerListener* resource. For example, every client that has a certificate issued by the root CA `CN = Contoso Root CA Cert, OU = Engineering, C = US` or an intermediate CA `CN = Contoso Intermediate CA` receives the attributes listed.
155
+
X509 attributes can be specified in the *BrokerAuthentication* resource. For example, every client that has a certificate issued by the root CA `CN = Contoso Root CA Cert, OU = Engineering, C = US` or an intermediate CA `CN = Contoso Intermediate CA` receives the attributes listed.
156
156
157
157
```yaml
158
158
apiVersion: mq.iotoperations.azure.com/v1beta1
@@ -161,32 +161,22 @@ metadata:
161
161
name: authn
162
162
namespace: azure-iot-operations
163
163
spec:
164
-
listenerRef:
165
-
- listener
166
164
authenticationMethods:
167
-
- custom:
168
-
endpoint: https://auth-server-template
169
-
caCert: custom-auth-ca
170
-
auth:
171
-
x509:
172
-
secretName: custom-auth-client-cert
173
-
namespace: azure-iot-operations
174
-
x509:
175
-
authorizationAttributes:
176
-
root:
177
-
subject = "CN = Contoso Root CA Cert, OU = Engineering, C = US"
178
-
attributes:
179
-
organization = contoso
180
-
intermediate:
181
-
subject = "CN = Contoso Intermediate CA"
182
-
attributes:
183
-
city = seattle
184
-
foo = bar
185
-
smart-fan:
186
-
subject = "CN = smart-fan"
187
-
attributes:
188
-
building = 17
189
-
```
165
+
- x509Credentials:
166
+
authorizationAttributes:
167
+
root:
168
+
subject = "CN = Contoso Root CA Cert, OU = Engineering, C = US"
169
+
attributes:
170
+
organization = contoso
171
+
intermediate:
172
+
subject = "CN = Contoso Intermediate CA"
173
+
attributes:
174
+
city = seattle
175
+
foo = bar
176
+
smart-fan:
177
+
subject = "CN = smart-fan"
178
+
attributes:
179
+
building = 17
190
180
191
181
To learn about the attributes file syntax, see [Authorize clients that use X.509 authentication](./howto-configure-authorization.md#authorize-clients-that-use-x509-authentication).
0 commit comments