What does the capability extra_x509_validation provide for a role?

[mkolkebeck]

There is very little description on what extra_x509_validation provides in the URLs below, which appears to be a new capability. Is there a better explanation elsewhere?

http://docs.splunk.com/Documentation/Splunk/6.4.2/Admin/authorizeconf#.5Bcapability::extra_x509_vali...
http://docs.splunk.com/Documentation/Splunk/6.4.2/Security/Rolesandcapabilities

[capability::extra_x509_validation]
* Required to perform additional X509 validation through
  the /server/security/extra-x509-validation.

[varunCarbyne]

Hi mkolebeck

Hope this capability is to do something with X.509 certificates validations

You can check more on X.509 from https://en.wikipedia.org/wiki/X.509

[mkolkebeck]

This capability appears to be removed from the authorize.conf.spec file as of version 6.6.0, but it's still listed in the roles and capabilities:

http://docs.splunk.com/Documentation/Splunk/6.6.0/Admin/authorizeconf
http://docs.splunk.com/Documentation/Splunk/latest/Admin/authorizeconf
http://docs.splunk.com/Documentation/Splunk/6.6.0/Security/Rolesandcapabilities
http://docs.splunk.com/Documentation/Splunk/latest/Security/Rolesandcapabilities