mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-24 16:10:02 -06:00
3b007b7bba
The variable was None by default and set to /etc/ipa/dnssec/openssl.cnf for fedora only because the code is specific to the support of pkcs11 engine for bind. As a consequence ipa-backup had a "None" value in the list of files to backup and failed on Exception. ipa-backup code is able to handle missing files, and the code using the pkcs11 engine is called only when NAMED_OPENSSL_ENGINE is set (only in fedora so far). It is safe to always define a value for DNSSEC_OPENSSL_CONF even on os where it does not exist. The fix also improves the method used to verify that a path exists. Fixes: https://pagure.io/freeipa/issue/8597 Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>
43 lines
1.4 KiB
Python
43 lines
1.4 KiB
Python
# Authors:
|
|
# Tomas Babej <tbabej@redhat.com>
|
|
#
|
|
# Copyright (C) 2014 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
'''
|
|
This Fedora base platform module exports default filesystem paths as common
|
|
in Fedora-based systems.
|
|
'''
|
|
|
|
# Fallback to default path definitions
|
|
from __future__ import absolute_import
|
|
|
|
from ipaplatform.redhat.paths import RedHatPathNamespace
|
|
from ipaplatform.fedora.constants import HAS_NFS_CONF
|
|
|
|
|
|
class FedoraPathNamespace(RedHatPathNamespace):
|
|
HTTPD_IPA_WSGI_MODULES_CONF = (
|
|
"/etc/httpd/conf.modules.d/02-ipa-wsgi.conf"
|
|
)
|
|
NAMED_CRYPTO_POLICY_FILE = "/etc/crypto-policies/back-ends/bind.config"
|
|
if HAS_NFS_CONF:
|
|
SYSCONFIG_NFS = '/etc/nfs.conf'
|
|
DNSSEC_KEYFROMLABEL = "/usr/sbin/dnssec-keyfromlabel"
|
|
|
|
|
|
paths = FedoraPathNamespace()
|