freeipa/install/oddjob/etc/oddjobd.conf.d/ipa-server.conf.in

<?xml version="1.0"?>
<oddjobconfig>
  <service name="org.freeipa.server">
    <allow user="root"/>
    <allow user="ipaapi"/>
    <object name="/">
      <interface name="org.freeipa.server">
        <method name="conncheck">
          <helper exec="@ODDJOBDIR@/org.freeipa.server.conncheck"
                  arguments="1"
                  prepend_user_name="no"
                  argument_passing_method="cmdline"/>
        </method>
      </interface>
      <interface name="org.freedesktop.DBus.Introspectable">
        <allow min_uid="0" max_uid="0"/>
      </interface>
    </object>
  </service>
</oddjobconfig>
replica install: add remote connection check over API Add server_conncheck command which calls ipa-replica-conncheck --replica over oddjob. https://fedorahosted.org/freeipa/ticket/5497 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> Reviewed-By: Tomas Babej <tbabej@redhat.com> 2015-12-09 01:18:21 -06:00			`<?xml version="1.0"?>`
			`<oddjobconfig>`
			`<service name="org.freeipa.server">`
			`<allow user="root"/>`
Add a new user to run the framework code Add the apache user the ipawebui group. Make the ccaches directory owned by the ipawebui group and make mod_auth_gssapi write the ccache files as r/w by the apache user and the ipawebui group. Fix tmpfiles creation ownership and permissions to allow the user to access ccaches files. The webui framework now works as a separate user than apache, so the certs used to access the dogtag instance need to be usable by this new user as well. Both apache and the webui user are in the ipawebui group, so use that. https://fedorahosted.org/freeipa/ticket/5959 Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com> 2016-08-16 08:03:19 -05:00			`<allow user="ipaapi"/>`
replica install: add remote connection check over API Add server_conncheck command which calls ipa-replica-conncheck --replica over oddjob. https://fedorahosted.org/freeipa/ticket/5497 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> Reviewed-By: Tomas Babej <tbabej@redhat.com> 2015-12-09 01:18:21 -06:00			`<object name="/">`
			`<interface name="org.freeipa.server">`
			`<method name="conncheck">`
Debian: auto-generate config files for oddjobd The oddjobd config files are now auto-generated with automake to have correct path to libexec on all platforms. Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com> Reviewed-By: Rob Crittenden <rcritten@redhat.com> 2019-04-23 02:21:37 -05:00			`<helper exec="@ODDJOBDIR@/org.freeipa.server.conncheck"`
replica install: add remote connection check over API Add server_conncheck command which calls ipa-replica-conncheck --replica over oddjob. https://fedorahosted.org/freeipa/ticket/5497 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> Reviewed-By: Tomas Babej <tbabej@redhat.com> 2015-12-09 01:18:21 -06:00			`arguments="1"`
			`prepend_user_name="no"`
			`argument_passing_method="cmdline"/>`
			`</method>`
			`</interface>`
			`<interface name="org.freedesktop.DBus.Introspectable">`
			`<allow min_uid="0" max_uid="0"/>`
			`</interface>`
			`</object>`
			`</service>`
			`</oddjobconfig>`