mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-23 07:33:27 -06:00
11b8a34346
Set `pkinit_anchors` in `krb5.conf` to a CA certificate bundle of CAs trusted to issue KDC certificates rather than `/etc/ipa/ca.crt`. Set `pkinit_pool` in `krb5.conf` to a CA certificate bundle of all CAs known to IPA. Make sure both bundles are exported in all installation code paths. https://pagure.io/freeipa/issue/6831 Reviewed-By: Stanislav Laznicka <slaznick@redhat.com> Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>
106 lines
2.0 KiB
Makefile
106 lines
2.0 KiB
Makefile
# This file will be processed with automake-1.7 to create Makefile.in
|
|
|
|
AUTOMAKE_OPTIONS = 1.7 subdir-objects
|
|
|
|
NULL =
|
|
|
|
AM_CFLAGS = $(NULL)
|
|
if HAVE_GCC
|
|
AM_CFLAGS += -Wall -Wshadow -Wstrict-prototypes -Wpointer-arith \
|
|
-Wcast-align -Werror-implicit-function-declaration \
|
|
$(NULL)
|
|
endif
|
|
export AM_CFLAGS
|
|
|
|
IPA_CONF_FILE=$(sysconfdir)/ipa/default.conf
|
|
|
|
AM_CPPFLAGS = \
|
|
-I$(srcdir) \
|
|
-I$(top_srcdir)/util \
|
|
-I$(top_srcdir)/asn1 \
|
|
-DPREFIX=\""$(prefix)"\" \
|
|
-DBINDIR=\""$(bindir)"\" \
|
|
-DLIBDIR=\""$(libdir)"\" \
|
|
-DLIBEXECDIR=\""$(libexecdir)"\" \
|
|
-DDATADIR=\""$(datadir)"\" \
|
|
-DLOCALEDIR=\""$(localedir)"\" \
|
|
-DIPACONFFILE=\""$(IPA_CONF_FILE)"\" \
|
|
$(KRB5_CFLAGS) \
|
|
$(LDAP_CFLAGS) \
|
|
$(SASL_CFLAGS) \
|
|
$(POPT_CFLAGS) \
|
|
$(WARN_CFLAGS) \
|
|
$(INI_CFLAGS) \
|
|
$(NULL)
|
|
|
|
sbin_PROGRAMS = \
|
|
ipa-getkeytab \
|
|
ipa-rmkeytab \
|
|
ipa-join \
|
|
$(NULL)
|
|
|
|
sbin_SCRIPTS = \
|
|
ipa-client-install \
|
|
ipa-client-automount \
|
|
ipa-certupdate \
|
|
$(NULL)
|
|
|
|
ipa_getkeytab_SOURCES = \
|
|
ipa-getkeytab.c \
|
|
ipa-client-common.c \
|
|
$(KRB5_UTIL_SRCS) \
|
|
$(NULL)
|
|
|
|
ipa_getkeytab_LDADD = \
|
|
$(top_builddir)/asn1/libipaasn1.la \
|
|
$(top_builddir)/util/libutil.la \
|
|
$(KRB5_LIBS) \
|
|
$(LDAP_LIBS) \
|
|
$(SASL_LIBS) \
|
|
$(POPT_LIBS) \
|
|
$(LIBINTL_LIBS) \
|
|
$(INI_LIBS) \
|
|
$(NULL)
|
|
|
|
ipa_rmkeytab_SOURCES = \
|
|
ipa-rmkeytab.c \
|
|
ipa-client-common.c \
|
|
$(NULL)
|
|
|
|
ipa_rmkeytab_LDADD = \
|
|
$(KRB5_LIBS) \
|
|
$(POPT_LIBS) \
|
|
$(LIBINTL_LIBS) \
|
|
$(NULL)
|
|
|
|
ipa_join_SOURCES = \
|
|
config.c \
|
|
ipa-client-common.c \
|
|
ipa-join.c \
|
|
$(NULL)
|
|
|
|
ipa_join_LDADD = \
|
|
$(KRB5_LIBS) \
|
|
$(LDAP_LIBS) \
|
|
$(SASL_LIBS) \
|
|
$(XMLRPC_LIBS) \
|
|
$(POPT_LIBS) \
|
|
$(LIBINTL_LIBS) \
|
|
$(NULL)
|
|
|
|
SUBDIRS = \
|
|
man \
|
|
$(NULL)
|
|
|
|
noinst_HEADERS = \
|
|
ipa-client-common.h
|
|
|
|
EXTRA_DIST = \
|
|
$(sbin_SCRIPTS) \
|
|
$(NULL)
|
|
|
|
install-data-hook:
|
|
$(INSTALL) -d -m 755 $(DESTDIR)$(IPA_SYSCONF_DIR)/nssdb
|
|
$(INSTALL) -d -m 755 $(DESTDIR)$(localstatedir)/lib/ipa-client/pki
|
|
$(INSTALL) -d -m 755 $(DESTDIR)$(localstatedir)/lib/ipa-client/sysrestore
|