mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-01-11 08:41:55 -06:00
c2c533b765
On RHEL8, ipa is using named-pkcs11.service but RHEL9 is based on fedora34 and uses named.service instead. There is already some support for this distinction in ipaplatform, and the patch relies on the specific settings that can be configured in ipaplatform/xx/services.py and ipaplatform/xx/constants.py On RHEL9 ipa also needs to define NAMED_OPENSSL_ENGINE for named to use openssl's okcs11 engine. Fixes: https://pagure.io/freeipa/issue/8753 Reviewed-By: Rob Crittenden <rcritten@redhat.com>
36 lines
932 B
Python
36 lines
932 B
Python
#
|
|
# Copyright (C) 2015 FreeIPA Contributors see COPYING for license
|
|
#
|
|
|
|
'''
|
|
This RHEL base platform module exports platform related constants.
|
|
'''
|
|
|
|
# Fallback to default constant definitions
|
|
from __future__ import absolute_import
|
|
|
|
from ipaplatform.redhat.constants import (
|
|
RedHatConstantsNamespace, User, Group
|
|
)
|
|
from ipaplatform.osinfo import osinfo
|
|
|
|
# RHEL 7 and earlier use /etc/sysconfig/nfs
|
|
# RHEL 8 uses /etc/nfs.conf
|
|
HAS_NFS_CONF = osinfo.version_number >= (8,)
|
|
# RHEL 9 uses pkcs11 as openssl engine
|
|
HAS_PKCS11_OPENSSL_ENGINE = osinfo.version_number >= (9,)
|
|
|
|
|
|
__all__ = ("constants", "User", "Group")
|
|
|
|
|
|
class RHELConstantsNamespace(RedHatConstantsNamespace):
|
|
IPA_ADTRUST_PACKAGE_NAME = "ipa-server-trust-ad"
|
|
IPA_DNS_PACKAGE_NAME = "ipa-server-dns"
|
|
if HAS_NFS_CONF:
|
|
SECURE_NFS_VAR = None
|
|
if HAS_PKCS11_OPENSSL_ENGINE:
|
|
NAMED_OPENSSL_ENGINE = "pkcs11"
|
|
|
|
constants = RHELConstantsNamespace()
|