From 993f76fe6035cf59cceb88f3611fc53680738007 Mon Sep 17 00:00:00 2001 From: "rcritten@redhat.com" Date: Mon, 6 Aug 2007 10:05:53 -0400 Subject: - Abstracted client class to work directly or over RPC - Add mod_auth_kerb and cyrus-sasl-gssapi to Requires - Remove references to admin server in ipa-server-setupssl - Generate a client certificate for the XML-RPC server to connect to LDAP with - Create a keytab for Apache - Create an ldif with a test user - Provide a certmap.conf for doing SSL client authentication - Update tools to use kerberos - Add User class --- ipa-server/ipaserver/krbinstance.py | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) (limited to 'ipa-server/ipaserver/krbinstance.py') diff --git a/ipa-server/ipaserver/krbinstance.py b/ipa-server/ipaserver/krbinstance.py index 253c506f..f4fe6001 100644 --- a/ipa-server/ipaserver/krbinstance.py +++ b/ipa-server/ipaserver/krbinstance.py @@ -28,6 +28,7 @@ from time import gmtime import os import pwd import socket +import time from util import * def host_to_domain(fqdn): @@ -82,6 +83,8 @@ class KrbInstance: self.__create_ds_keytab() + self.__create_http_keytab() + self.__create_sample_bind_zone() self.start() @@ -175,3 +178,18 @@ class KrbInstance: cfg_fd.close() pent = pwd.getpwnam(self.ds_user) os.chown("/etc/sysconfig/fedora-ds", pent.pw_uid, pent.pw_gid) + + def __create_http_keytab(self): + (kwrite, kread, kerr) = os.popen3("/usr/kerberos/sbin/kadmin.local") + kwrite.write("addprinc -randkey HTTP/"+self.fqdn+"@"+self.realm+"\n") + kwrite.flush() + kwrite.write("ktadd -k /etc/httpd/conf/ipa.keytab HTTP/"+self.fqdn+"@"+self.realm+"\n") + kwrite.flush() + kwrite.close() + kread.close() + kerr.close() + + while not file_exists("/etc/httpd/conf/ipa.keytab"): + time.sleep(1) + pent = pwd.getpwnam("apache") + os.chown("/etc/httpd/conf/ipa.keytab", pent.pw_uid, pent.pw_gid) -- cgit From b9b06a2a607ddc7a98ac78b46e63304b714f3cce Mon Sep 17 00:00:00 2001 From: "rcritten@redhat.com" Date: Mon, 6 Aug 2007 10:51:23 -0400 Subject: Generate /etc/httpd/conf.d/ipa.conf from a template so the realm can be set during installation --- ipa-server/ipaserver/krbinstance.py | 8 ++++++++ 1 file changed, 8 insertions(+) (limited to 'ipa-server/ipaserver/krbinstance.py') diff --git a/ipa-server/ipaserver/krbinstance.py b/ipa-server/ipaserver/krbinstance.py index f4fe6001..84f8ebf2 100644 --- a/ipa-server/ipaserver/krbinstance.py +++ b/ipa-server/ipaserver/krbinstance.py @@ -79,6 +79,8 @@ class KrbInstance: self.__configure_ldap() + self.__configure_http() + self.__create_instance() self.__create_ds_keytab() @@ -193,3 +195,9 @@ class KrbInstance: time.sleep(1) pent = pwd.getpwnam("apache") os.chown("/etc/httpd/conf/ipa.keytab", pent.pw_uid, pent.pw_gid) + + def __configure_http(self): + http_txt = template_file(SHARE_DIR + "ipa.conf", self.sub_dict) + http_fd = open("/etc/httpd/conf.d/ipa.conf", "w") + http_fd.write(http_txt) + http_fd.close() -- cgit