freeipa

#9014 'init/tmpfilesd/ipa.conf.in' hardcodes apache group
Closed: fixed by frenaud. Opened by tjaalton.

Closed: fixed
Reopen Issue

This file has 'apache' for Fedora, but Debian needs 'www-data' as shown in ipaplatform/debian/constants.py.

This could be tricky to get right. Currently this is a .in file but it isn't pre-processed in any way, just copied. in Fedora/RHEL the rpm macro %tmpfiles_create handles installation and configuration of the file (and this macro is deprecated, as it turns out).

From a quick read it essentially does this:

/usr/bin/systemd-tmpfiles --create

I don't know how other distributions handle this.

In order to make it possible to substitute this I think it would need to be generated during ipa-server-install instead and systemd-tmpfiles called directly. I'm not sure if that has any implications or not.

Actually, it's not that hard.. we can follow the example set by ODS_USER etc, I'll send a MR.

part of https://github.com/freeipa/freeipa/pull/6091

master:

  • 4738ab3dc74e01c3a838e62160ba02f97d6abc08 ipaplatform/debian: Fix HTTPD_ALIAS_DIR, and drop some obsolete paths.
  • de97d83c8c7cbc297bcc9dedd3dd30f3ad79227a ipaplatform: Add support for recognizing systemd-timesyncd
  • dfbae694a916b44c8a682664367a7099534dc23c ipaplatform/debian: Fix named keytab name
  • e94afdd6f728780dcced9c5150fa4d07e5647989 ipaplatform/debian: Fix ntpd service name
  • 52090d39e4fb33d03c9bb4825dc847111e9ca786 ipatests/test_ipaplatform: Skip test_ipa_version on Debian
  • 9799b819fb049653a9352d5a5526d97accba2bef ipaplatform: Modify paths to fips-mode-setup and systemd-tmpfiles
  • 9eecaddd86f0ef830c6783ef13c2c3761d95000b configure: Use HTTPD_GROUP in init/tmpfiles/ipa.conf.in

ipa-4-9:

  • a0eb02cfb6635eff82482b297965ff5348c660cd ipaplatform/debian: Fix HTTPD_ALIAS_DIR, and drop some obsolete paths.
  • cf9c4cc7dabace4f7971a810bbdde4c258d7a4be ipaplatform: Add support for recognizing systemd-timesyncd
  • da9be70f7030dfa8c99efd6952dfa0f24b590fc5 ipaplatform/debian: Fix named keytab name
  • dcdc31b6f9f750b617b23717f7c39ec560133c2d ipaplatform/debian: Fix ntpd service name
  • e99870f7d0b58d88e9c18ad8ecc7edc1adb16051 ipatests/test_ipaplatform: Skip test_ipa_version on Debian
  • 739d3566951e50b6467c80835945b2697fab8576 ipaplatform: Modify paths to fips-mode-setup and systemd-tmpfiles
  • 69f5f319d1b8bf1b18a8798149d2fcffa43642ec configure: Use HTTPD_GROUP in init/tmpfiles/ipa.conf.in

Metadata Update from @frenaud:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.