Guest24897
/
DockerCLI
mirror of https://github.com/docker/cli.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add short description about default authentication method in authorization docs 

Following the discussion in #21556, adding a short description of the
default user authentication mechanism (without requiring authentication
plugins)
Signed-off-by: Liron Levin <liron@twistlock.com>
This commit is contained in:
Liron Levin 2016-03-30 21:14:33 +03:00 committed by Tibor Vass
parent 0a13b2a1ce
commit 1db38dfe21
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
docs/extend/plugins_authorization.md
View File

@ -49,6 +49,11 @@ Each plugin must reside within directories described under the
**Note**: the abbreviations `AuthZ` and `AuthN` mean authorization and authentication **Note**: the abbreviations `AuthZ` and `AuthN` mean authorization and authentication
respectively. respectively.
## Default user authorization mechanism
If TLS is enabled in the [Docker daemon](https://docs.docker.com/engine/security/https/), the default user authorization flow extracts the user details from the certificate subject name.
That is, the `User` field is set to the client certificate subject common name, and the `AuthenticationMethod` field is set to `TLS`.
## Basic architecture ## Basic architecture
You are responsible for registering your plugin as part of the Docker daemon You are responsible for registering your plugin as part of the Docker daemon