IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-16 18:35:01 -06:00
Code Issues Packages Projects Releases Wiki Activity

Set SuiteSpotGroup when setting up our 389-ds instances.

Browse Source 
The group is now required because 389-ds has tightened the permissions
on /var/run/dirsrv. We use the same group for both our LDAP instances
and /var/run/dirsrv ends up as root:dirsrv mode 0770.

ticket 1010
This commit is contained in:
Rob Crittenden 2011-02-24 14:45:46 -05:00 committed by Adam Young
parent 22a503785e
commit 99d6e0883a
2 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ipaserver/install/cainstance.py
View File

@ -72,6 +72,7 @@ INF_TEMPLATE = """
[General]
FullMachineName= $FQHN
SuiteSpotUserID= $USER
SuiteSpotGroup= $GROUP
ServerRoot= $SERVER_ROOT
[slapd]
ServerPort= $DSPORT
@ -255,7 +256,8 @@ class CADSInstance(service.Service):
PASSWORD=self.dm_password, SUFFIX=self.suffix.lower(),
REALM=self.realm_name, USER=PKI_DS_USER,
SERVER_ROOT=server_root, DOMAIN=self.domain,
TIME=int(time.time()), DSPORT=self.ds_port)
TIME=int(time.time()), DSPORT=self.ds_port,
GROUP=dsinstance.DS_GROUP)
def __create_ds_user(self):
user_exists = True

2
ipaserver/install/dsinstance.py
View File

@ -149,6 +149,7 @@ INF_TEMPLATE = """
[General]
FullMachineName= $FQHN
SuiteSpotUserID= $USER
SuiteSpotGroup= $GROUP
ServerRoot= $SERVER_ROOT
[slapd]
ServerPort= 389
@ -319,6 +320,7 @@ class DsInstance(service.Service):
TIME=int(time.time()), IDSTART=self.idstart,
IDMAX=self.idmax, HOST=self.fqdn,
ESCAPED_SUFFIX= escape_dn_chars(self.suffix.lower()),
GROUP=DS_GROUP,
)
def __create_ds_user(self):