freeipa-client.post*: Use /var/log/ipaclient-upgrade.log instead of ipaupgrade.log, and remove it on purge. (Closes: #842071)

This commit is contained in:
Timo Aaltonen committed 2016-10-26 19:34:58 +03:00
1 parent f5b7751bca
commit b0a9bfbe69
3 files changed
+15 -5

No files matched your search

+7
View File
@@ -1,3 +1,10 @@
freeipa (4.3.2-4) UNRELEASED; urgency=medium
* freeipa-client.post*: Use /var/log/ipaclient-upgrade.log instead of
ipaupgrade.log, and remove it on purge. (Closes: #842071)
-- Timo Aaltonen <tjaalton@debian.org> Wed, 26 Oct 2016 19:34:44 +0300
freeipa (4.3.2-3) unstable; urgency=medium
* rules: Add a check to override_dh_fixperms so that chmod is not run
+6 -4
View File
@@ -1,14 +1,16 @@
#!/bin/sh
set -e
LOGFILE=/var/log/ipaclient-upgrade.log
if [ "$1" = configure ]; then
if [ ! -f /etc/ipa/nssdb/cert8.db ]; then
python2 -c 'from ipapython.certdb import create_ipa_nssdb; create_ipa_nssdb()' >/dev/null 2>&1
tmp=$(mktemp) || exit
if certutil -L -d /etc/pki/nssdb -n 'IPA CA' -a >"$tmp" 2>/var/log/ipaupgrade.log; then
certutil -A -d /etc/ipa/nssdb -n 'IPA CA' -t CT,C,C -a -i "$tmp" >/var/log/ipaupgrade.log 2>&1
elif certutil -L -d /etc/pki/nssdb -n 'External CA cert' -a >"$tmp" 2>/var/log/ipaupgrade.log; then
certutil -A -d /etc/ipa/nssdb -n 'External CA cert' -t C,, -a -i "$tmp" >/var/log/ipaupgrade.log 2>&1
if certutil -L -d /etc/pki/nssdb -n 'IPA CA' -a >"$tmp" 2>$LOGFILE; then
certutil -A -d /etc/ipa/nssdb -n 'IPA CA' -t CT,C,C -a -i "$tmp" >$LOGFILE 2>&1
elif certutil -L -d /etc/pki/nssdb -n 'External CA cert' -a >"$tmp" 2>$LOGFILE; then
certutil -A -d /etc/ipa/nssdb -n 'External CA cert' -t C,, -a -i "$tmp" >$LOGFILE 2>&1
fi
rm -f "$tmp"
fi
+2 -1
View File
@@ -2,7 +2,6 @@
set -e
if [ "$1" = purge ]; then
rm -rf /var/lib/ipa-client
rm -f /etc/ipa/default.conf
rm -f /etc/pki/nssdb/cert8.db \
/etc/pki/nssdb/key3.db \
@@ -15,6 +14,8 @@ if [ "$1" = purge ]; then
rmdir /etc/pki/nssdb || true
rmdir /etc/ipa/nssdb || true
rmdir /etc/ipa || true
rm -rf /var/lib/ipa-client
rm -f /var/log/ipaclient-upgrade.log
fi
#DEBHELPER#