freeipa/ipalib
Simo Sorce 4fd89833ee Add a new user to run the framework code
Add the apache user the ipawebui group.
Make the ccaches directory owned by the ipawebui group and make
mod_auth_gssapi write the ccache files as r/w by the apache user and
the ipawebui group.
Fix tmpfiles creation ownership and permissions to allow the user to
access ccaches files.
The webui framework now works as a separate user than apache, so the certs
used to access the dogtag instance need to be usable by this new user as well.
Both apache and the webui user are in the ipawebui group, so use that.

https://fedorahosted.org/freeipa/ticket/5959

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2017-02-15 07:13:37 +01:00
..
install Use Anonymous user to obtain FAST armor ccache 2017-02-15 07:13:37 +01:00
__init__.py Ditch version_info and use version number from ipapython.version 2017-02-10 16:16:44 +01:00
aci.py Remove unused variables in the code 2016-09-27 13:35:58 +02:00
backend.py ldap2: change default time/size limit 2016-11-07 11:34:03 +01:00
base.py Modernize use of range() 2015-09-01 11:42:01 +02:00
capabilities.py Replace LooseVersion 2016-11-24 15:46:40 +01:00
cli.py Revert "Add 'ipa localenv' subcommand" 2016-12-02 13:00:06 +01:00
config.py Raise errors.EnvironmentError if IPA_CONFDIR var is incorrectly used 2016-12-02 15:05:33 +01:00
constants.py Add a new user to run the framework code 2017-02-15 07:13:37 +01:00
crud.py ipalib, ipaserver: fix incorrect API.register calls in docstrings 2016-05-25 16:06:26 +02:00
dns.py dns: do not rely on custom param fields in record attributes 2016-06-20 16:39:12 +02:00
errors.py csrgen: Add code to generate scripts that generate CSRs 2017-01-31 10:20:28 +01:00
frontend.py fix: regression in API version comparison 2016-12-13 13:53:27 +01:00
krb_utils.py Change session handling 2017-02-15 07:13:37 +01:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
messages.py Fix malformed or missing docstrings in ipalib/messages 2016-08-16 11:59:35 +02:00
misc.py Fix pep-8 transgressions in ipalib/misc.py 2016-12-02 13:00:06 +01:00
output.py allow 'value' output param in commands without primary key 2016-07-20 13:57:01 +02:00
parameters.py Stable _is_null check 2017-02-10 16:16:44 +01:00
pkcs10.py cert-request: accept CSRs with extraneous data 2016-11-11 15:42:26 +01:00
plugable.py Raise errors.EnvironmentError if IPA_CONFDIR var is incorrectly used 2016-12-02 15:05:33 +01:00
request.py remove trailing newlines form python modules 2016-10-12 10:38:52 +02:00
rpc.py py3: send Decimal number as string instead of base64 encoded value 2017-02-08 08:32:44 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Adjustments for setup requirements v2 2016-12-02 09:45:14 +01:00
text.py Python3 pylint fixes 2016-11-25 16:18:22 +01:00
util.py DNSSEC: forwarders validation improvement 2017-02-08 15:59:41 +01:00
x509.py ipalib.x509: Handle missing SAN gracefully 2017-02-07 13:58:48 +01:00