From 8a866620f36356e570dcee332db6f487837435a6 Mon Sep 17 00:00:00 2001 From: Jan Cholasta Date: Wed, 23 Sep 2015 10:35:06 +0200 Subject: [PATCH] install: fix kdcproxy user home directory https://fedorahosted.org/freeipa/ticket/5314 Reviewed-By: Martin Babinsky --- freeipa.spec.in | 1 + ipaplatform/base/paths.py | 1 + ipaserver/install/httpinstance.py | 4 +++- 3 files changed, 5 insertions(+), 1 deletion(-) diff --git a/freeipa.spec.in b/freeipa.spec.in index 530f6141872804ab3801f2da6271fce0d9308a09..6527109b422a1e3065d5a540c3e2a3af670f2ebf 100644 --- a/freeipa.spec.in +++ b/freeipa.spec.in @@ -702,6 +702,7 @@ fi %{_libexecdir}/ipa/ipa-dnskeysync-replica %{_libexecdir}/ipa/ipa-ods-exporter %{_libexecdir}/ipa/ipa-httpd-kdcproxy +%ghost %verify(not owner group) %dir %{_sharedstatedir}/kdcproxy %config(noreplace) %{_sysconfdir}/sysconfig/ipa_memcached %config(noreplace) %{_sysconfdir}/sysconfig/ipa-dnskeysyncd %config(noreplace) %{_sysconfdir}/sysconfig/ipa-ods-exporter diff --git a/ipaplatform/base/paths.py b/ipaplatform/base/paths.py index 97c330c31844fcf19bec2e96bf2b23cba5f7f3f0..215caf90ea1ca4e5db8f43f8f09002ce5d5cd280 100644 --- a/ipaplatform/base/paths.py +++ b/ipaplatform/base/paths.py @@ -286,6 +286,7 @@ class BasePathNamespace(object): REPLICA_INFO_GPG_TEMPLATE = "/var/lib/ipa/replica-info-%s.gpg" SYSRESTORE = "/var/lib/ipa/sysrestore" STATEFILE_DIR = "/var/lib/ipa/sysupgrade" + VAR_LIB_KDCPROXY = "/var/lib/kdcproxy" VAR_LIB_PKI_DIR = "/var/lib/pki" VAR_LIB_PKI_CA_DIR = "/var/lib/pki-ca" PKI_ALIAS_CA_P12 = "/var/lib/pki-ca/alias/ca.p12" diff --git a/ipaserver/install/httpinstance.py b/ipaserver/install/httpinstance.py index 4f2902e1b1ac03d9c6bd1949b66ede9abb5be28e..f55e698f7eb3d8f8aa603f99d750a009a806b70a 100644 --- a/ipaserver/install/httpinstance.py +++ b/ipaserver/install/httpinstance.py @@ -83,8 +83,10 @@ def create_kdcproxy_user(): tasks.create_system_user( name=KDCPROXY_USER, group=KDCPROXY_USER, - homedir=paths.VAR_LIB, + homedir=paths.VAR_LIB_KDCPROXY, shell=paths.NOLOGIN, + comment="IPA KDC Proxy User", + create_homedir=True, ) -- 2.4.3