freeipa/ipaplatform
Simo Sorce 4fd89833ee Add a new user to run the framework code
Add the apache user the ipawebui group.
Make the ccaches directory owned by the ipawebui group and make
mod_auth_gssapi write the ccache files as r/w by the apache user and
the ipawebui group.
Fix tmpfiles creation ownership and permissions to allow the user to
access ccaches files.
The webui framework now works as a separate user than apache, so the certs
used to access the dogtag instance need to be usable by this new user as well.
Both apache and the webui user are in the ipawebui group, so use that.

https://fedorahosted.org/freeipa/ticket/5959

Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
2017-02-15 07:13:37 +01:00
..
base Add a new user to run the framework code 2017-02-15 07:13:37 +01:00
debian ipaplatform: Add Debian platform module. 2017-01-19 16:45:42 +01:00
fedora Break ipaplatform / ipalib import cycle of hell 2016-11-24 16:30:32 +01:00
redhat Add a new user to run the framework code 2017-02-15 07:13:37 +01:00
rhel Break ipaplatform / ipalib import cycle of hell 2016-11-24 16:30:32 +01:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py ipaplatform: Add Debian platform module. 2017-01-19 16:45:42 +01:00