IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Update /etc/ipa/nssdb in client scripts

Browse Source 
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Stanislav Laznicka <slaznick@redhat.com>
This commit is contained in:
Christian Heimes
2018-02-23 11:04:10 +01:00
parent 66a32d8931
commit a8555d42a4
1 changed files with 7 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ipaclient/install/client.py
+7 -4
View File
@@ -2306,8 +2306,9 @@ def install_check(options):
raise ScriptError(rval=CLIENT_INSTALL_ERROR)
def create_ipa_nssdb():
db = certdb.NSSDatabase(paths.IPA_NSSDB_DIR)
def create_ipa_nssdb(db=None):
if db is None:
db = certdb.NSSDatabase(paths.IPA_NSSDB_DIR)
db.create_db(mode=0o755, backup=True)
os.chmod(db.pwd_file, 0o600)
@@ -2316,8 +2317,10 @@ def update_ipa_nssdb():
ipa_db = certdb.NSSDatabase(paths.IPA_NSSDB_DIR)
sys_db = certdb.NSSDatabase(paths.NSS_DB_DIR)
if not os.path.exists(os.path.join(ipa_db.secdir, 'cert8.db')):
create_ipa_nssdb()
if not ipa_db.exists():
create_ipa_nssdb(ipa_db)
if ipa_db.dbtype == 'dbm':
ipa_db.convert_db(rename_old=False)
for nickname, trust_flags in (
('IPA CA', certdb.IPA_CA_TRUST_FLAGS),