diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2007-10-29 12:00:48 -0400 |
|---|---|---|
| committer | Rob Crittenden <rcritten@redhat.com> | 2007-10-29 12:00:48 -0400 |
| commit | e40c583b12ed3d0b1db62154b7b0b84eed44ed6e (patch) | |
| tree | 71f66a0eeabab7d5dfaddb09fa2ebb03a940b015 /ipa-server/ipaserver/krbinstance.py | |
| parent | 859291a706a8e37d6b145d27052276e927004f49 (diff) | |
| download | freeipa-e40c583b12ed3d0b1db62154b7b0b84eed44ed6e.tar.gz freeipa-e40c583b12ed3d0b1db62154b7b0b84eed44ed6e.tar.xz freeipa-e40c583b12ed3d0b1db62154b7b0b84eed44ed6e.zip | |
Create configuration for MIT Windows kerberos client and install into
http://hostname/config so users can point their MIT client at the IPA
server and automatically fetch the configuration.
Diffstat (limited to 'ipa-server/ipaserver/krbinstance.py')
| -rw-r--r-- | ipa-server/ipaserver/krbinstance.py | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/ipa-server/ipaserver/krbinstance.py b/ipa-server/ipaserver/krbinstance.py index 15242460a..26de2b03e 100644 --- a/ipa-server/ipaserver/krbinstance.py +++ b/ipa-server/ipaserver/krbinstance.py @@ -175,6 +175,22 @@ class KrbInstance: krb5_fd.write(krb5_conf) krb5_fd.close() + # Windows configuration files + krb5_ini = template_file(SHARE_DIR+"krb5.ini.template", self.sub_dict) + krb5_fd = open("/usr/share/ipa/html/krb5.ini", "w+") + krb5_fd.write(krb5_ini) + krb5_fd.close() + + krb_con = template_file(SHARE_DIR+"krb.con.template", self.sub_dict) + krb_fd = open("/usr/share/ipa/html/krb.con", "w+") + krb_fd.write(krb_con) + krb_fd.close() + + krb_realm = template_file(SHARE_DIR+"krbrealm.con.template", self.sub_dict) + krb_fd = open("/usr/share/ipa/html/krbrealm.con", "w+") + krb_fd.write(krb_realm) + krb_fd.close() + #populate the directory with the realm structure args = ["/usr/kerberos/sbin/kdb5_ldap_util", "-D", "uid=kdc,cn=sysaccounts,cn=etc,"+self.suffix, "-w", self.kdc_password, "create", "-s", "-P", self.master_password, "-r", self.realm, "-subtrees", self.suffix, "-sscope", "sub"] try: |