IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2024-12-23 07:33:27 -06:00
Code Issues Packages Projects Releases Wiki Activity
f6adf4f3a8
freeipa/ipaplatform/base/constants.py

40 lines
1.0 KiB
Python
Raw Normal View History

ipaplatform: Add constants submodule Introduce a ipaplatform/constants.py file to store platform related constants, which are not paths. Reviewed-By: Martin Basti <mbasti@redhat.com> Reviewed-By: Petr Spacek <pspacek@redhat.com>
2015-07-02 05:38:43 -05:00
#
# Copyright (C) 2015 FreeIPA Contributors see COPYING for license
#
'''
This base platform module exports platform dependant constants.
'''
class BaseConstantsNamespace(object):
Move user/group constants for PKI and DS into ipaplatform https://fedorahosted.org/freeipa/ticket/5619 Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
2016-01-19 07:18:30 -06:00
DS_USER = 'dirsrv'
DS_GROUP = 'dirsrv'
ipaplatform: Add HTTPD_USER to constants, and use it. https://fedorahosted.org/freeipa/ticket/5343 Reviewed-By: Tomas Babej <tbabej@redhat.com>
2015-10-06 08:02:37 -05:00
HTTPD_USER = "apache"
Separate RA cert store from the HTTP cert store This is in preparation for separating out the user under which the ipa api framework runs as. This commit also removes certs.NSS_DIR to avoid confusion and replaces it where appropriate with the correct NSS DB directory, either the old HTTPD_ALIAS_DIR ot the RA DB IPA_RADB_DIR. In some cases its use is removed altogether as it was simply not necessary. https://fedorahosted.org/freeipa/ticket/5959 Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2016-12-13 09:32:32 -06:00
HTTPD_GROUP = "apache"
Configure HTTPD to work via Gss-Proxy https://fedorahosted.org/freeipa/ticket/4189 https://fedorahosted.org/freeipa/ticket/5959 Signed-off-by: Simo Sorce <simo@redhat.com> Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2016-11-29 10:10:22 -06:00
GSSPROXY_USER = "root"
DNS: check if DNS package is installed Instead of separate checking of DNS required packages, we need just check if IPA DNS package is installed. https://fedorahosted.org/freeipa/ticket/4058 Reviewed-By: Martin Babinsky <mbabinsk@redhat.com> Reviewed-By: Petr Spacek <pspacek@redhat.com> Reviewed-By: Tomas Babej <tbabej@redhat.com>
2015-07-01 08:05:45 -05:00
IPA_DNS_PACKAGE_NAME = "freeipa-server-dns"
ipaplatform: Move remaining user/group constants to ipaplatform.constants. Use ipaplatform.constants in every corner instead of importing other bits or calling some platform specific things, and remove most of the remaining hardcoded uid's. https://fedorahosted.org/freeipa/ticket/5343 Reviewed-By: David Kupka <dkupka@redhat.com>
2016-03-18 05:22:33 -05:00
KDCPROXY_USER = "kdcproxy"
ipaplatform: Add NAMED_USER to constants https://fedorahosted.org/freeipa/ticket/5343 Reviewed-By: Tomas Babej <tbabej@redhat.com>
2015-10-06 08:27:21 -05:00
NAMED_USER = "named"
ipaplatform: Move remaining user/group constants to ipaplatform.constants. Use ipaplatform.constants in every corner instead of importing other bits or calling some platform specific things, and remove most of the remaining hardcoded uid's. https://fedorahosted.org/freeipa/ticket/5343 Reviewed-By: David Kupka <dkupka@redhat.com>
2016-03-18 05:22:33 -05:00
NAMED_GROUP = "named"
Move user/group constants for PKI and DS into ipaplatform https://fedorahosted.org/freeipa/ticket/5619 Reviewed-By: David Kupka <dkupka@redhat.com> Reviewed-By: Fraser Tweedale <ftweedal@redhat.com>
2016-01-19 07:18:30 -06:00
PKI_USER = 'pkiuser'
PKI_GROUP = 'pkiuser'
ipaplatform: Add NTPD_OPTS_VAR and NTPD_OPTS_QUOTE to constants https://fedorahosted.org/freeipa/ticket/5343 Reviewed-By: Tomas Babej <tbabej@redhat.com>
2015-10-06 10:46:00 -05:00
# ntpd init variable used for daemon options
NTPD_OPTS_VAR = "OPTIONS"
# quote used for daemon options
NTPD_OPTS_QUOTE = "\""
ipaplatform: Move remaining user/group constants to ipaplatform.constants. Use ipaplatform.constants in every corner instead of importing other bits or calling some platform specific things, and remove most of the remaining hardcoded uid's. https://fedorahosted.org/freeipa/ticket/5343 Reviewed-By: David Kupka <dkupka@redhat.com>
2016-03-18 05:22:33 -05:00
ODS_USER = "ods"
ODS_GROUP = "ods"
ipaplatform: Add SECURE_NFS_VAR to constants https://fedorahosted.org/freeipa/ticket/5343 Reviewed-By: Tomas Babej <tbabej@redhat.com>
2015-10-06 08:35:24 -05:00
# nfsd init variable used to enable kerberized NFS
SECURE_NFS_VAR = "SECURE_NFS"
adtrust: move SELinux settings to constants SELinux is platform dependend, moving boolean setting to platform module. Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2017-05-18 10:23:54 -05:00
SELINUX_BOOLEAN_ADTRUST = {
'samba_portmapper': 'on',
}
httpd: move SELinux settings to constants SELinux is platform dependend, moving boolean setting to platform module. Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
2017-05-18 10:19:23 -05:00
SELINUX_BOOLEAN_HTTPD = {
'httpd_can_network_connect': 'on',
'httpd_manage_ipa': 'on',
'httpd_run_ipa': 'on',
'httpd_dbus_sssd': 'on',
}
ipaplatform: Move remaining user/group constants to ipaplatform.constants. Use ipaplatform.constants in every corner instead of importing other bits or calling some platform specific things, and remove most of the remaining hardcoded uid's. https://fedorahosted.org/freeipa/ticket/5343 Reviewed-By: David Kupka <dkupka@redhat.com>
2016-03-18 05:22:33 -05:00
SSSD_USER = "sssd"
Reference in New Issue Copy Permalink