diff options
author | Christian Heimes <cheimes@redhat.com> | 2016-11-28 16:24:33 +0100 |
---|---|---|
committer | Jan Cholasta <jcholast@redhat.com> | 2016-12-02 09:14:35 +0100 |
commit | 1e6a204b4372bbbfb722a00370a5ce4e34406b9f (patch) | |
tree | b8deef8cc3b4f04990f5d305eafdeff14d5d8928 /ipaclient | |
parent | 98f0077360884da6df31b351caaed7510dec94de (diff) | |
download | freeipa-1e6a204b4372bbbfb722a00370a5ce4e34406b9f.tar.gz freeipa-1e6a204b4372bbbfb722a00370a5ce4e34406b9f.tar.xz freeipa-1e6a204b4372bbbfb722a00370a5ce4e34406b9f.zip |
Set explicit confdir option for global contexts
Some API contexts are used to modify global state (e.g. files in /etc
and /var). These contexts do not support confdir overrides. Initialize
the API with an explicit confdir argument to paths.ETC_IPA.
The special contexts are:
* backup
* cli_installer
* installer
* ipctl
* renew
* restore
* server
* updates
The patch also corrects the context of the ipa-httpd-kdcproxy script to
'server'.
https://fedorahosted.org/freeipa/ticket/6389
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'ipaclient')
-rw-r--r-- | ipaclient/install/client.py | 1 | ||||
-rw-r--r-- | ipaclient/install/ipa_certupdate.py | 2 |
2 files changed, 2 insertions, 1 deletions
diff --git a/ipaclient/install/client.py b/ipaclient/install/client.py index 7bd84045d..0954c2bff 100644 --- a/ipaclient/install/client.py +++ b/ipaclient/install/client.py @@ -2620,6 +2620,7 @@ def _install(options): with certdb.NSSDatabase() as tmp_db: api.bootstrap(context='cli_installer', + confdir=paths.ETC_IPA, debug=options.debug, delegate=False, nss_dir=tmp_db.secdir) diff --git a/ipaclient/install/ipa_certupdate.py b/ipaclient/install/ipa_certupdate.py index 2c55db462..75c5d97df 100644 --- a/ipaclient/install/ipa_certupdate.py +++ b/ipaclient/install/ipa_certupdate.py @@ -53,7 +53,7 @@ class CertUpdate(admintool.AdminTool): raise admintool.ScriptError( "IPA client is not configured on this system.") - api.bootstrap(context='cli_installer') + api.bootstrap(context='cli_installer', confdir=paths.ETC_IPA) api.finalize() server = urlsplit(api.env.jsonrpc_uri).hostname |