diff options
| author | Pavel Vomacka <pvomacka@redhat.com> | 2017-03-09 12:14:21 +0100 |
|---|---|---|
| committer | David Kupka <dkupka@redhat.com> | 2017-03-14 15:13:43 +0100 |
| commit | 75c592d3b9081474cae51c929e6af29c7a0eebb6 (patch) | |
| tree | 08a829055afb0d7d4c3ee4048ae4826f590aac9b /ipaserver/install | |
| parent | 8980f4098ebf6b62556e24f090718802d1e495d3 (diff) | |
| download | freeipa-75c592d3b9081474cae51c929e6af29c7a0eebb6.tar.gz freeipa-75c592d3b9081474cae51c929e6af29c7a0eebb6.tar.xz freeipa-75c592d3b9081474cae51c929e6af29c7a0eebb6.zip | |
Support certificate login after installation and upgrade
Add necessary steps which set SSSD and set SELinux boolean during
installation or upgrade. Also create new endpoint in apache for
login using certificates.
https://pagure.io/freeipa/issue/6225
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
Reviewed-By: Petr Vobornik <pvoborni@redhat.com>
Reviewed-By: David Kupka <dkupka@redhat.com>
Diffstat (limited to 'ipaserver/install')
| -rw-r--r-- | ipaserver/install/httpinstance.py | 1 | ||||
| -rw-r--r-- | ipaserver/install/server/upgrade.py | 5 |
2 files changed, 6 insertions, 0 deletions
diff --git a/ipaserver/install/httpinstance.py b/ipaserver/install/httpinstance.py index 27d0cfe2a..b53333a84 100644 --- a/ipaserver/install/httpinstance.py +++ b/ipaserver/install/httpinstance.py @@ -53,6 +53,7 @@ SELINUX_BOOLEAN_SETTINGS = dict( httpd_can_network_connect='on', httpd_manage_ipa='on', httpd_run_ipa='on', + httpd_dbus_sssd='on', ) HTTPD_USER = constants.HTTPD_USER diff --git a/ipaserver/install/server/upgrade.py b/ipaserver/install/server/upgrade.py index b19c2f0ae..993835ed1 100644 --- a/ipaserver/install/server/upgrade.py +++ b/ipaserver/install/server/upgrade.py @@ -23,6 +23,7 @@ from ipalib.install import certmonger, sysrestore import SSSDConfig import ipalib.util import ipalib.errors +from ipaclient.install.client import sssd_enable_service from ipaplatform import services from ipaplatform.tasks import tasks from ipapython import ipautil, version, certdb @@ -1771,6 +1772,10 @@ def upgrade_configuration(): set_sssd_domain_option('ipa_server_mode', 'True') + sssdconfig = SSSDConfig.SSSDConfig() + sssdconfig.import_config() + sssd_enable_service(sssdconfig, 'ifp') + krb = krbinstance.KrbInstance(fstore) krb.fqdn = fqdn krb.realm = api.env.realm |