IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2026-07-29 15:55:47 -05:00
Code Issues Packages Projects Releases Wiki Activity

Support sqlite NSSDB

Browse Source 
Prepare CertDB and NSSDatabase to support sqlite DB format. NSSDatabase
will automatically detect and use either old DBM or new SQL format. Old
databases are not migrated yet.

https://pagure.io/freeipa/issue/7049

Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
This commit is contained in:
Christian Heimes
2017-11-16 12:17:01 +01:00
parent 64a88d597c
commit 0071744929
14 changed files with 411 additions and 197 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ipaclient/install/client.py
+2 -8
View File
@@ -2304,9 +2304,6 @@ def create_ipa_nssdb():
db = certdb.NSSDatabase(paths.IPA_NSSDB_DIR)
db.create_db(mode=0o755, backup=True)
os.chmod(db.pwd_file, 0o600)
os.chmod(os.path.join(db.secdir, 'cert8.db'), 0o644)
os.chmod(os.path.join(db.secdir, 'key3.db'), 0o644)
os.chmod(os.path.join(db.secdir, 'secmod.db'), 0o644)
def update_ipa_nssdb():
@@ -3067,11 +3064,8 @@ def uninstall(options):
logger.error("%s failed to stop tracking certificate: %s",
cmonger.service_name, e)
for filename in (os.path.join(ipa_db.secdir, 'cert8.db'),
os.path.join(ipa_db.secdir, 'key3.db'),
os.path.join(ipa_db.secdir, 'secmod.db'),
os.path.join(ipa_db.secdir, 'pwdfile.txt')):
remove_file(filename)
for filename in certdb.NSS_FILES:
remove_file(os.path.join(ipa_db.secdir, filename))
# Remove any special principal names we added to the IPA CA helper
certmonger.remove_principal_from_cas()