diff options
author | Christian Heimes <cheimes@redhat.com> | 2015-07-15 21:49:16 +0200 |
---|---|---|
committer | Matthew Harmsen <mharmsen@redhat.com> | 2015-07-15 21:29:20 -0600 |
commit | 417adee8bc0607ccf43f1dd80fc08b870088937b (patch) | |
tree | a03bbc16f24c56e673a78e26b972c9623bb88c9b /specs | |
parent | 9fa1d0c968977ef23e26556b0a8e8e76b32c7288 (diff) | |
download | pki-417adee8bc0607ccf43f1dd80fc08b870088937b.tar.gz pki-417adee8bc0607ccf43f1dd80fc08b870088937b.tar.xz pki-417adee8bc0607ccf43f1dd80fc08b870088937b.zip |
Create pkiuser user and group during installation
The group 'pkiuser' and user 'pkiuser' are now created during the
installation of the pki-server package.
https://fedorahosted.org/pki/ticket/1468
Diffstat (limited to 'specs')
-rw-r--r-- | specs/pki-core.spec | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/specs/pki-core.spec b/specs/pki-core.spec index 148c90734..6ac51d85e 100644 --- a/specs/pki-core.spec +++ b/specs/pki-core.spec @@ -30,6 +30,13 @@ distutils.sysconfig import get_python_lib; print(get_python_lib(1))")} # REMINDER: Remove this '%%define' once 'tpsclient' is rewritten as a Java app %define _unpackaged_files_terminate_build 0 +# pkiuser and group. The uid and gid are preallocated +# see /usr/share/doc/setup/uidgid +%define pki_username pkiuser +%define pki_uid 17 +%define pki_groupname pkiuser +%define pki_gid 17 +%define pki_homedir /usr/share/pki Name: pki-core Version: 10.2.6 @@ -395,6 +402,7 @@ Requires: velocity Requires(post): systemd-units Requires(preun): systemd-units Requires(postun): systemd-units +Requires(pre): shadow-utils %if 0%{?rhel} Requires: tomcatjss >= 7.1.0-6 @@ -727,6 +735,17 @@ if (test("/etc/sysconfig/pki/ca") or end %endif +%pre -n pki-server +getent group %{pki_groupname} >/dev/null || groupadd -f -g %{pki_gid} -r %{pki_groupname} +if ! getent passwd %{pki_username} >/dev/null ; then + if ! getent passwd %{pki_uid} >/dev/null ; then + useradd -r -u %{pki_uid} -g %{pki_groupname} -d %{pki_homedir} -s /sbin/nologin -c "Certificate System" %{pki_username} + else + useradd -r -g %{pki_groupname} -d %{pki_homedir} -s /sbin/nologin -c "Certificate System" %{pki_username} + fi +fi +exit 0 + %post -n pki-base if [ $1 -eq 1 ] |