#5343 platform: Abstract known Fedora-specific bits
Closed: fixed 3 years ago Opened 6 years ago by tbabej.

The following bits should be abstracted into platform-dependant code:

  • Hardcoded usernames
  • Config/service files with platform specific data (i.e. paths, usernames) should be converted to templates
  • Fedora-specific libpaths need to be abstracted
  • named.conf.template needs to introduce a way how to drop the default zone
  • httpdinstance module needs specific post-setup steps on non-Fedora certain platforms
  • While altering config files, do not use platform dependant paths/constants (i.e. httpdinstance.py:251)
  • Makefile needs to use --install-layout=deb for setup.py

Kudos to Timo Aaltonen for identifying these issues.


master:

  • 7059117 paths: Add GENERATE_RNDC_KEY.
  • 7c32eca httpinstance: Replace a hardcoded path to password.conf with HTTPD_PASSWORD_CONF

ipa-4-2:

  • b8a2104 paths: Add GENERATE_RNDC_KEY.
  • 181c814 httpinstance: Replace a hardcoded path to password.conf with HTTPD_PASSWORD_CONF

One thing I've missed:

  • ipa-client/ipaclient/ntpconf.py rewrites SYSCONFIG_NTPD unconditionally

master:

  • 874b6d9 ipaplatform: Add HTTPD_USER to constants, and use it.
  • 489c248 ipaplatform: Add NAMED_USER to constants
  • d269e25 httpinstance: Use full path via HTTPD_IPA_REWRITE_CONF for Include.
  • 24ebdf9 ipaplatform: Add SECURE_NFS_VAR to constants
  • 43654c9 ipaplatform: Add NTPD_OPTS_VAR and NTPD_OPTS_QUOTE to constants

Still a few missing pieces to this, reopening.

another one:

install/oddjob/etc/oddjobd.conf.d/oddjobd-ipa-trust.conf: <helper exec="/usr/libexec/ipa/com.redhat.idm.trust-fetch-domains"

and

install/oddjob/etc/oddjobd.conf.d/ipa-server.conf: <helper exec="/usr/libexec/ipa/oddjob/org.freeipa.server.conncheck"

also install/conf/ipa-kdc-proxy.conf.template hardcores python paths:
WSGIImportScript /usr/lib/python2.7/site-packages/kdcproxy/init.py
WSGIScriptAlias /KdcProxy /usr/lib/python2.7/site-packages/kdcproxy/init.py

ipa-4-3:

  • 813dde8 ipaplatform: Move remaining user/group constants to ipaplatform.constants.
  • 13e9af3 Use ODS_USER/ODS_GROUP in opendnssec_conf.template

master:

  • 2a2d636 ipaplatform: Move remaining user/group constants to ipaplatform.constants.
  • f761051 Use ODS_USER/ODS_GROUP in opendnssec_conf.template

master:

  • b793c90 Fix kdc.conf.template to use ipaplatform.paths.

ipa-4-3:

  • d09b8f0 Fix kdc.conf.template to use ipaplatform.paths.

Metadata Update from @tbabej:
- Issue set to the milestone: FreeIPA 4.5 backlog

4 years ago

Fedora and RHEL bits have been sufficiently abstracted to support Debian and Ubuntu. I'm closing this bug as fixed. Please open a new bug if more work is needed.

Metadata Update from @cheimes:
- Issue close_status updated to: fixed

3 years ago

Login to comment on this ticket.

Metadata