freeipa

#6386 Use api.env.nss_dir instead of paths.IPA_NSSDB_DIR
Closed: Fixed Opened by cheimes.

Closed: Fixed
Reopen Issue

Some plugins and scripts still use paths.IPA_NSSDB_DIR instead of api.env.nss_dir. The use of paths.IPA_NSSDB_DIR renders nss_dir override in bootstrap pointless.

I also like to suggest that bootstrap() should treat the location of nssdb like the location of default.conf. It should default to nssdb relative to the confdir option. This makes it much easier to bootstrap a client with a local configuration directory.

./ipaserver/install/ipa_backup.py:        os.path.join(paths.IPA_NSSDB_DIR, file)
./ipaserver/install/ipa_restore.py:            filename = os.path.join(paths.IPA_NSSDB_DIR, basename)
./client/ipa-client-install:    ipa_db = certdb.NSSDatabase(paths.IPA_NSSDB_DIR)
./client/ipa-client-install:            certmonger.stop_tracking(paths.IPA_NSSDB_DIR,
./client/ipa-client-install:    passwd_fname = os.path.join(paths.IPA_NSSDB_DIR, 'pwdfile.txt')
./client/ipa-client-install:        certmonger.request_cert(nssdb=paths.IPA_NSSDB_DIR,
./client/ipa-client-install:    ipa_db = certdb.NSSDatabase(paths.IPA_NSSDB_DIR)
./ipaclient/plugins/vault.py:        current_dbdir = paths.IPA_NSSDB_DIR
./ipaclient/plugins/vault.py:        current_dbdir = paths.IPA_NSSDB_DIR
./ipaclient/plugins/otptoken.py:        handler = HTTPSHandler(dbdir=paths.IPA_NSSDB_DIR,
./ipaclient/ipa_certupdate.py:        ipa_db = certdb.NSSDatabase(paths.IPA_NSSDB_DIR)
./ipapython/certdb.py:    db = NSSDatabase(paths.IPA_NSSDB_DIR)
./ipapython/certdb.py:    ipa_db = NSSDatabase(paths.IPA_NSSDB_DIR)
./install/tools/ipa-replica-conncheck:                    nss_dir = paths.IPA_NSSDB_DIR

This looks as a part of the bigger RFe I filed - #6389.

master:

  • a22a5dd676f581910ac7872c1a20322278fc7d4a Use api.env.nss_dir instead of paths.IPA_NSSDB_DIR

master:

  • 9006ed34bb1edfaafc3345c1128800dc802c14ff Make api.env.nss_dir relative to api.env.confdir

Metadata Update from @cheimes:
- Issue assigned to someone
- Issue set to the milestone: FreeIPA 4.5
Metadata
None
None
None
Normal
defect
Client
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.