Attachment 1450677 Details for Bug 1590565 – diff -u

diff -u

file_1590565.txt (text/plain), 2.54 KB, created by Marco Rhodes on 2018-06-12 22:44:56 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Marco Rhodes

Created: 2018-06-12 22:44:56 UTC

Size: 2.54 KB

patch

obsolete

>--- ipa.py.orig	2018-05-18 16:03:53.190135103 -0700
>+++ ipa.py	2018-06-11 14:24:27.639349181 -0700
>@@ -58,6 +58,7 @@
>                "/var/log/pki/pki-tomcat/ca/debug",
>                "/var/log/pki/pki-tomcat/ca/system",
>                "/var/log/pki/pki-tomcat/ca/transactions",
>+               "/var/log/pki/pki-tomcat/ca/selftests.log",
>                "/var/log/pki/pki-tomcat/catalina.*",
>                "/var/log/pki/pki-ca-spawn.*",
>                "/var/log/pki/pki-tomcat/kra/debug",
>@@ -70,6 +71,7 @@
>                "/var/log/pki-ca/debug",
>                "/var/log/pki-ca/system",
>                "/var/log/pki-ca/transactions",
>+               "/var/log/pki-ca/selftests.log",
>                "/var/log/pki-ca/catalina.*",
>                "/var/log/pki/pki-ca-spawn.*"
>             ])
>@@ -112,17 +114,26 @@
>             "/etc/dirsrv/slapd-*/dse.ldif",
>             "/etc/dirsrv/slapd-*/schema/99user.ldif",
>             "/etc/hosts",
>+            "/etc/httpd/alias/*",
>             "/etc/named.*",
>             "/etc/ipa/ca.crt",
>             "/etc/ipa/default.conf",
>+            "/root/.ipa/log/cli.log",
>             "/var/lib/certmonger/requests/[0-9]*",
>-            "/var/lib/certmonger/cas/[0-9]*"
>+            "/var/lib/certmonger/cas/[0-9]*",
>+            "/var/lib/ipa/ra-agent.pem",
>+            "/var/kerberos/krb5kdc/kdc.crt",
>+            "/var/lib/ipa/sysrestore/sysrestore.state"
>         ])
> 
>         self.add_forbidden_path("/etc/pki/nssdb/key*")
>         self.add_forbidden_path("/etc/dirsrv/slapd-*/key*")
>         self.add_forbidden_path("/etc/dirsrv/slapd-*/pin.txt")
>         self.add_forbidden_path("/etc/dirsrv/slapd-*/pwdfile.txt")
>+        self.add_forbidden_path("/etc/httpd/alias/ipasession.key")
>+        self.add_forbidden_path("/etc/httpd/alias/key*")
>+        self.add_forbidden_path("/etc/httpd/alias/pin.txt")
>+        self.add_forbidden_path("/etc/httpd/alias/pwdfile.txt")
>         self.add_forbidden_path("/etc/named.keytab")
> 
>         #  Make sure to use the right PKI config and NSS DB folders
>@@ -143,8 +154,10 @@
>             "ls -la /etc/dirsrv/slapd-*/schema/",
>             "getcert list",
>             "certutil -L -d /etc/httpd/alias/",
>+            "pki-server cert-find --show-all",
>+            "pki-server subsystem-cert-validate ca", 
>             "klist -ket /etc/dirsrv/ds.keytab",
>-            "klist -ket /etc/httpd/conf/ipa.keytab"
>+            "klist -ket /var/lib/ipa/gssproxy/http.keytab"
>         ])
> 
>         for certdb_directory in glob("/etc/dirsrv/slapd-*/"):

Actions: View

Attachments on bug 1590565: 1450677