mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
General fixes.
Do not start ipa_kpasswd by default yet
This commit is contained in:
@@ -14,7 +14,7 @@ BuildRequires: fedora-ds-base-devel openldap-devel krb5-devel nss-devel mozldap-
|
|||||||
Requires: python fedora-ds-base krb5-server krb5-server-ldap nss-tools openldap-clients httpd mod_python mod_auth_kerb python-ldap freeipa-python ntp cyrus-sasl-gssapi nss TurboGears
|
Requires: python fedora-ds-base krb5-server krb5-server-ldap nss-tools openldap-clients httpd mod_python mod_auth_kerb python-ldap freeipa-python ntp cyrus-sasl-gssapi nss TurboGears
|
||||||
|
|
||||||
%define httpd_conf /etc/httpd/conf.d
|
%define httpd_conf /etc/httpd/conf.d
|
||||||
%define plugin_dir /usr/lib/fedora-ds/plugins
|
%define plugin_dir /usr/lib/dirsrv/plugins
|
||||||
|
|
||||||
%description
|
%description
|
||||||
FreeIPA is a server for identity, policy, and audit.
|
FreeIPA is a server for identity, policy, and audit.
|
||||||
|
|||||||
@@ -132,7 +132,7 @@ def main():
|
|||||||
run(["/sbin/chkconfig", "ipa-kpasswd", "on"])
|
run(["/sbin/chkconfig", "ipa-kpasswd", "on"])
|
||||||
|
|
||||||
# Start Kpasswd
|
# Start Kpasswd
|
||||||
run(["/sbin/service", "ipa-kpasswd", "start"])
|
# run(["/sbin/service", "ipa-kpasswd", "start"])
|
||||||
|
|
||||||
# Create the config file
|
# Create the config file
|
||||||
fd = open("/etc/ipa/ipa.conf", "w")
|
fd = open("/etc/ipa/ipa.conf", "w")
|
||||||
|
|||||||
@@ -1,4 +1,5 @@
|
|||||||
dn: cn=ipa_pwd_extop,cn=plugins,cn=config
|
dn: cn=ipa_pwd_extop,cn=plugins,cn=config
|
||||||
|
changetype: add
|
||||||
objectclass: top
|
objectclass: top
|
||||||
objectclass: nsSlapdPlugin
|
objectclass: nsSlapdPlugin
|
||||||
objectclass: extensibleObject
|
objectclass: extensibleObject
|
||||||
|
|||||||
@@ -150,9 +150,8 @@ class KrbInstance:
|
|||||||
args = ["/usr/kerberos/sbin/kdb5_ldap_util", "-D", "uid=kdc,cn=kerberos,"+self.suffix, "-w", self.kdc_password, "create", "-s", "-P", self.master_password, "-r", self.realm, "-subtrees", self.suffix, "-sscope", "sub"]
|
args = ["/usr/kerberos/sbin/kdb5_ldap_util", "-D", "uid=kdc,cn=kerberos,"+self.suffix, "-w", self.kdc_password, "create", "-s", "-P", self.master_password, "-r", self.realm, "-subtrees", self.suffix, "-sscope", "sub"]
|
||||||
run(args)
|
run(args)
|
||||||
|
|
||||||
# TODO: NOT called yet, need to find out how to make sure the plugin is available first
|
#add the password extop module
|
||||||
def __add_pwd_extop_module(self):
|
def __add_pwd_extop_module(self):
|
||||||
#add the password extop module
|
|
||||||
extop_txt = template_file(SHARE_DIR + "pwd-extop-conf.ldif", self.sub_dict)
|
extop_txt = template_file(SHARE_DIR + "pwd-extop-conf.ldif", self.sub_dict)
|
||||||
extop_fd = write_tmp_file(extop_txt)
|
extop_fd = write_tmp_file(extop_txt)
|
||||||
ldap_mod(extop_fd, "cn=Directory Manager", self.admin_password)
|
ldap_mod(extop_fd, "cn=Directory Manager", self.admin_password)
|
||||||
|
|||||||
Reference in New Issue
Block a user