diff options
| author | Simo Sorce <simo@redhat.com> | 2016-11-29 11:10:22 -0500 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2017-02-15 07:13:37 +0100 |
| commit | d2f5fc304f1938d23171ae330fa20b213ceed54e (patch) | |
| tree | b77e05211632aef8e08cb3cd937d8498d9391ed5 /ipaserver/install/server | |
| parent | b6741d81e187fc84177c12ef8ad900d3b5cda6a4 (diff) | |
| download | freeipa-d2f5fc304f1938d23171ae330fa20b213ceed54e.tar.gz freeipa-d2f5fc304f1938d23171ae330fa20b213ceed54e.tar.xz freeipa-d2f5fc304f1938d23171ae330fa20b213ceed54e.zip | |
Configure HTTPD to work via Gss-Proxy
https://fedorahosted.org/freeipa/ticket/4189
https://fedorahosted.org/freeipa/ticket/5959
Signed-off-by: Simo Sorce <simo@redhat.com>
Reviewed-By: Jan Cholasta <jcholast@redhat.com>
Diffstat (limited to 'ipaserver/install/server')
| -rw-r--r-- | ipaserver/install/server/upgrade.py | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py index 80abeba53..6919f521e 100644 --- a/ipaserver/install/server/upgrade.py +++ b/ipaserver/install/server/upgrade.py @@ -1431,6 +1431,14 @@ def update_ipa_httpd_service_conf(http): http.update_httpd_service_ipa_conf() +def update_http_keytab(http): + root_logger.info('[Moving HTTPD service keytab to gssproxy]') + if os.path.exists(paths.OLD_IPA_KEYTAB): + shutil.move(paths.OLD_IPA_KEYTAB, http.keytab) + pent = pwd.getpwnam(http.keytab_user) + os.chown(http.keytab, pent.pw_uid, pent.pw_gid) + + def ds_enable_sidgen_extdom_plugins(ds): """For AD trust agents, make sure we enable sidgen and extdom plugins """ @@ -1629,6 +1637,8 @@ def upgrade_configuration(): update_mod_nss_cipher_suite(http) fix_trust_flags() export_kra_agent_pem() + update_http_keytab(http) + http.configure_gssproxy() http.start() uninstall_selfsign(ds, http) |