Smartcard authentication question

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

Hello there,

I have a question about smartcard authentication. We use Gitlab EE omnibus. As it currently stands, local certificate databases match with a CN and an emailaddress in the subject. Is it possible to only match based on CN?

In our organization certificates are generated by another entity and we have no influence on how certificates are made. We would like to match based only on something like the following:

CN=john.smith.s.1234567890,OU=CONTRACTOR,OU=PKI=Gov,O=Gov,C=US

The numbers on the end the users name is an ID used as a UID.

Is there something in one of the rb configuration files that we can change for the matching to only match something like the above? We do not have an emailaddress in our subject.

Edited by 🤖 GitLab Bot 🤖