236 lines
12 KiB
Python
236 lines
12 KiB
Python
--- ipaplatform/freebsd/paths.py.orig 2026-08-11 16:06:37 UTC
|
|
+++ ipaplatform/freebsd/paths.py
|
|
@@ -0,0 +1,232 @@
|
|
+#
|
|
+# Copyright (C) 2026 FreeIPA Contributors see COPYING for license
|
|
+#
|
|
+
|
|
+from ipaplatform.base.paths import BasePathNamespace
|
|
+
|
|
+
|
|
+class FreeBSDPathNamespace(BasePathNamespace):
|
|
+ USR_SHARE_IPA_DIR = "%%LOCALBASE%%/share/ipa/"
|
|
+ USR_SHARE_IPA_CLIENT_DIR = "%%LOCALBASE%%/share/ipa/client"
|
|
+ SSH_IPA_CONFIG_TEMPLATE = "%%PREFIX%%/share/ipa/client/ssh_ipa.conf.template"
|
|
+ SSHD_IPA_CONFIG_TEMPLATE = "%%PREFIX%%/share/ipa/client/sshd_ipa.conf.template"
|
|
+ UNBOUND_CONF_SRC = "%%PREFIX%%/share/ipa/client/unbound.conf.template"
|
|
+ PKIDESTROY = "%%LOCALBASE%%/sbin/pkidestroy"
|
|
+ PKISPAWN = "%%LOCALBASE%%/sbin/pkispawn"
|
|
+ PKI = "%%LOCALBASE%%/bin/pki"
|
|
+ PKI_SERVER = "%%LOCALBASE%%/sbin/pki-server"
|
|
+ BIN_TOMCAT = "%%LOCALBASE%%/apache-tomcat-9.0/bin/catalina.sh"
|
|
+ BIN_PS = "/bin/ps"
|
|
+
|
|
+ PKI_CONFIGURATION = "%%LOCALBASE%%/etc/pki"
|
|
+ PKI_TOMCAT = "/var/db/pki/pki-tomcat/conf"
|
|
+ PKI_TOMCAT_ALIAS_DIR = "/var/db/pki/pki-tomcat/alias"
|
|
+ PKI_TOMCAT_ALIAS_PWDFILE_TXT = "/var/db/pki/pki-tomcat/alias/pwdfile.txt"
|
|
+ PKI_TOMCAT_PASSWORD_CONF = "/var/db/pki/pki-tomcat/conf/password.conf"
|
|
+ PKI_TOMCAT_SERVER_XML = "/var/db/pki/pki-tomcat/conf/server.xml"
|
|
+ PKI_ACME_CONFIGSOURCES_CONF = "/var/db/pki/pki-tomcat/conf/acme/configsources.conf"
|
|
+ PKI_ACME_DATABASE_CONF = "/var/db/pki/pki-tomcat/conf/acme/database.conf"
|
|
+ PKI_ACME_ENGINE_CONF = "/var/db/pki/pki-tomcat/conf/acme/engine.conf"
|
|
+ PKI_ACME_ISSUER_CONF = "/var/db/pki/pki-tomcat/conf/acme/issuer.conf"
|
|
+ PKI_ACME_REALM_CONF = "/var/db/pki/pki-tomcat/conf/acme/realm.conf"
|
|
+
|
|
+ VAR_LIB_PKI_DIR = "/var/db/pki"
|
|
+ VAR_LIB_PKI_CA_ALIAS_DIR = "/var/db/pki-ca/alias"
|
|
+ VAR_LIB_PKI_TOMCAT_DIR = "/var/db/pki/pki-tomcat"
|
|
+ CA_BACKUP_KEYS_P12 = "/var/db/pki/pki-tomcat/alias/ca_backup_keys.p12"
|
|
+ KRA_BACKUP_KEYS_P12 = "/var/db/pki/pki-tomcat/alias/kra_backup_keys.p12"
|
|
+ CA_CS_CFG_PATH = "/var/db/pki/pki-tomcat/conf/ca/CS.cfg"
|
|
+ CASIGNEDLOGCERT_CFG = "/var/db/pki/pki-tomcat/ca/profiles/ca/caSignedLogCert.cfg"
|
|
+ KRA_CS_CFG_PATH = "/var/db/pki/pki-tomcat/conf/kra/CS.cfg"
|
|
+ SVC_LIST_FILE = "/var/run/ipa/services.list"
|
|
+ IPA_OTPD_INETD_CONF = "/var/run/ipa/ipa-otpd.inetd.conf"
|
|
+ IPA_OTPD_INETD_PID = "/var/run/ipa/ipa-otpd-inetd.pid"
|
|
+ IPA_OTPD_SOCKET_DIR = "/var/run/krb5kdc"
|
|
+ IPA_OTPD_SOCKET = "/var/run/krb5kdc/DEFAULT.socket"
|
|
+ IPA_CCACHES = "/var/run/ipa/ccaches"
|
|
+ IPA_RENEWAL_LOCK = "/var/run/ipa/renewal.lock"
|
|
+ KLIST = "%%LOCALBASE%%/bin/klist"
|
|
+ KADMIN_LOCAL = "%%LOCALBASE%%/sbin/kadmin.local"
|
|
+ KDB5_UTIL = "%%LOCALBASE%%/sbin/kdb5_util"
|
|
+
|
|
+ ETC_IPA = "%%LOCALBASE%%/etc/ipa"
|
|
+ IPA_DEFAULT_CONF = "%%LOCALBASE%%/etc/ipa/default.conf"
|
|
+
|
|
+ IPA_CUSTODIA_CONF_DIR = "%%LOCALBASE%%/etc/ipa/custodia"
|
|
+ IPA_CUSTODIA_CONF = "%%LOCALBASE%%/etc/ipa/custodia/custodia.conf"
|
|
+ IPA_CUSTODIA_KEYS = "%%LOCALBASE%%/etc/ipa/custodia/server.keys"
|
|
+ IPA_CUSTODIA_SOCKET = "/var/run/httpd/ipa-custodia.sock"
|
|
+
|
|
+ KDCPROXY_CONFIG = "%%LOCALBASE%%/etc/ipa/kdcproxy/kdcproxy.conf"
|
|
+
|
|
+ VAR_LIB_IPA = "/var/db/ipa"
|
|
+ CA_BUNDLE_PEM = "/var/db/ipa-client/pki/ca-bundle.pem"
|
|
+ KDC_CA_BUNDLE_PEM = "/var/db/ipa-client/pki/kdc-ca-bundle.pem"
|
|
+ HTTPD_CERT_FILE = "/var/db/ipa/certs/httpd.crt"
|
|
+ HTTPD_KEY_FILE = "/var/db/ipa/private/httpd.key"
|
|
+ HTTPD_PASSWD_FILE_FMT = "/var/db/ipa/passwds/{host}-443-RSA"
|
|
+ HTTP_KEYTAB = "/var/db/ipa/gssproxy/http.keytab"
|
|
+ GSSPROXY_CONF = "%%LOCALBASE%%/etc/gssproxy/10-ipa.conf"
|
|
+ IPA_CCACHE_SWEEPER_GSSPROXY_SOCK = (
|
|
+ "/var/db/gssproxy/ipa_ccache_sweeper.sock"
|
|
+ )
|
|
+ RA_AGENT_PEM = "/var/db/ipa/ra-agent.pem"
|
|
+ RA_AGENT_KEY = "/var/db/ipa/ra-agent.key"
|
|
+ IPA_BACKUP_DIR = "/var/db/ipa/backup"
|
|
+ IPA_DNSSEC_DIR = "/var/db/ipa/dnssec"
|
|
+ IPA_KASP_DB_BACKUP = "/var/db/ipa/ipa-kasp.db.backup"
|
|
+ DNSSEC_TOKENS_DIR = "/var/db/ipa/dnssec/tokens"
|
|
+ DNSSEC_SOFTHSM_PIN = "/var/db/ipa/dnssec/softhsm_pin"
|
|
+ IPA_CA_CSR = "/var/db/ipa/ca.csr"
|
|
+ REPLICA_INFO_TEMPLATE = "/var/db/ipa/replica-info-%s"
|
|
+ REPLICA_INFO_GPG_TEMPLATE = "/var/db/ipa/replica-info-%s.gpg"
|
|
+ PKI_CA_PUBLISH_DIR = "/var/db/ipa/pki-ca/publish"
|
|
+ CERTUTIL = "%%LOCALBASE%%/bin/certutil"
|
|
+ PK12UTIL = "%%LOCALBASE%%/bin/pk12util"
|
|
+ MODUTIL = "%%LOCALBASE%%/bin/modutil"
|
|
+ SYSCONFIG_PKI_TOMCAT = "/var/db/pki/pki-tomcat/conf/tomcat.conf"
|
|
+ SYSCONFIG_PKI_TOMCAT_PKI_TOMCAT_DIR = "%%LOCALBASE%%/etc/pki/tomcat/pki-tomcat"
|
|
+ IPA_CLIENT_SYSRESTORE = "/var/db/ipa-client/sysrestore"
|
|
+ SYSRESTORE_INDEX = "/var/db/ipa-client/sysrestore/sysrestore.index"
|
|
+ SYSRESTORE = "/var/db/ipa/sysrestore"
|
|
+ STATEFILE_DIR = "/var/db/ipa/sysupgrade"
|
|
+
|
|
+ VAR_KERBEROS_KRB5KDC_DIR = "%%LOCALBASE%%/var/krb5kdc/"
|
|
+ KRB5_CONF = "%%LOCALBASE%%/etc/krb5.conf"
|
|
+ COMMON_KRB5_CONF_DIR = "%%LOCALBASE%%/etc/krb5.conf.d/"
|
|
+ KRB5_FREEIPA_DEFAULTS = "%%LOCALBASE%%/etc/krb5.conf.d/freeipa"
|
|
+ KRB5_FREEIPA = "%%LOCALBASE%%/etc/krb5.conf.d/freeipa-realm"
|
|
+ KRB5_FREEIPA_SERVER = "%%LOCALBASE%%/etc/krb5.conf.d/freeipa-server"
|
|
+ VAR_KRB5KDC_K5_REALM = "%%LOCALBASE%%/var/krb5kdc/.k5."
|
|
+ CACERT_PEM = "%%LOCALBASE%%/var/krb5kdc/cacert.pem"
|
|
+ KRB5KDC_KADM5_ACL = "%%LOCALBASE%%/var/krb5kdc/kadm5.acl"
|
|
+ KRB5KDC_KADM5_KEYTAB = "%%LOCALBASE%%/var/krb5kdc/kadm5.keytab"
|
|
+ KRB5KDC_KDC_CONF = "%%LOCALBASE%%/var/krb5kdc/kdc.conf"
|
|
+ KDC_CERT = "%%LOCALBASE%%/var/krb5kdc/kdc.crt"
|
|
+ KDC_KEY = "%%LOCALBASE%%/var/krb5kdc/kdc.key"
|
|
+
|
|
+ IPACTL = "%%LOCALBASE%%/sbin/ipactl"
|
|
+ IPA_CLIENT_AUTOMOUNT = "%%PREFIX%%/sbin/ipa-client-automount"
|
|
+ IPA_CLIENT_INSTALL = "%%PREFIX%%/sbin/ipa-client-install"
|
|
+ IPA_GETKEYTAB = "%%PREFIX%%/sbin/ipa-getkeytab"
|
|
+ IPA_RMKEYTAB = "%%PREFIX%%/sbin/ipa-rmkeytab"
|
|
+ SBIN_IPA_JOIN = "%%PREFIX%%/sbin/ipa-join"
|
|
+ CONNCHECK_CCACHE = "%%LOCALBASE%%/etc/ipa/.conncheck_ccache"
|
|
+ IPA_DNS_CCACHE = "%%LOCALBASE%%/etc/ipa/.dns_ccache"
|
|
+ OPENLDAP_LDAP_CONF = "%%LOCALBASE%%/etc/openldap/ldap.conf"
|
|
+ IPA_DNS_UPDATE_TXT = "%%LOCALBASE%%/etc/ipa/.dns_update.txt"
|
|
+ IPA_CA_CRT = "%%LOCALBASE%%/etc/ipa/ca.crt"
|
|
+ IPA_DNSKEYSYNCD_KEYTAB = "%%LOCALBASE%%/etc/ipa/dnssec/ipa-dnskeysyncd.keytab"
|
|
+ IPA_ODS_EXPORTER_KEYTAB = "%%LOCALBASE%%/etc/ipa/dnssec/ipa-ods-exporter.keytab"
|
|
+ IPA_SERVER_CONF = "%%LOCALBASE%%/etc/ipa/server.conf"
|
|
+ DNSSEC_OPENSSL_CONF = "%%LOCALBASE%%/etc/ipa/dnssec/openssl.cnf"
|
|
+ DNSSEC_SOFTHSM2_CONF = "%%LOCALBASE%%/etc/ipa/dnssec/softhsm2.conf"
|
|
+ DNSSEC_SOFTHSM_PIN_SO = "%%LOCALBASE%%/etc/ipa/dnssec/softhsm_pin_so"
|
|
+ IPA_NSSDB_DIR = "%%LOCALBASE%%/etc/ipa/nssdb"
|
|
+ IPA_NSSDB_PWDFILE_TXT = "%%LOCALBASE%%/etc/ipa/nssdb/pwdfile.txt"
|
|
+ NSS_DB_DIR = "%%LOCALBASE%%/etc/pki/nssdb"
|
|
+
|
|
+ LIBEXEC_IPA_DIR = "%%LOCALBASE%%/libexec/ipa"
|
|
+ IPA_OTPD = "%%LOCALBASE%%/libexec/ipa/ipa-otpd"
|
|
+ IPA_OTPD_WRAPPER = "%%LOCALBASE%%/libexec/ipa/ipa-otpd-wrapper"
|
|
+ IPA_OTPD_LOG = "/var/log/ipa-otpd.log"
|
|
+ LIBEXEC_CERTMONGER_DIR = "%%LOCALBASE%%/libexec/certmonger"
|
|
+ CERTMONGER_COMMAND_TEMPLATE = "%%LOCALBASE%%/libexec/ipa/certmonger/%s"
|
|
+ CERTMONGER_DOGTAG_SUBMIT = "%%LOCALBASE%%/libexec/certmonger/dogtag-submit"
|
|
+ DOGTAG_IPA_CA_RENEW_AGENT_SUBMIT = "%%LOCALBASE%%/libexec/certmonger/dogtag-ipa-ca-renew-agent-submit"
|
|
+ DOGTAG_IPA_RENEW_AGENT_SUBMIT = "%%LOCALBASE%%/libexec/certmonger/dogtag-ipa-renew-agent-submit"
|
|
+ IPA_SERVER_GUARD = "%%LOCALBASE%%/libexec/certmonger/ipa-server-guard"
|
|
+ IPA_DNSKEYSYNCD_REPLICA = "%%LOCALBASE%%/libexec/ipa/ipa-dnskeysync-replica"
|
|
+ IPA_DNSKEYSYNCD = "%%LOCALBASE%%/libexec/ipa/ipa-dnskeysyncd"
|
|
+ IPA_ODS_EXPORTER = "%%LOCALBASE%%/libexec/ipa/ipa-ods-exporter"
|
|
+ IPA_PKI_RETRIEVE_KEY = "%%LOCALBASE%%/libexec/ipa/ipa-pki-retrieve-key"
|
|
+ IPA_PKI_WAIT_RUNNING = "%%LOCALBASE%%/libexec/ipa/ipa-pki-wait-running"
|
|
+ IPA_CUSTODIA_HANDLER = "%%LOCALBASE%%/libexec/ipa/custodia"
|
|
+ IPA_CUSTODIA_CHECK = "%%LOCALBASE%%/libexec/ipa/ipa-custodia-check"
|
|
+
|
|
+ SSSD_CONF = "%%LOCALBASE%%/etc/sssd/sssd.conf"
|
|
+ SSSD_CONF_BKP = "%%LOCALBASE%%/etc/sssd/sssd.conf.bkp"
|
|
+ SSSD_CONF_DELETED = "%%LOCALBASE%%/etc/sssd/sssd.conf.deleted"
|
|
+ SSSD_DB = "/var/db/sss/db"
|
|
+ SSSD_LDB = "/var/db/sss/db/sssd.ldb"
|
|
+ SSSD_CONFIG_LDB = "/var/db/sss/db/config.ldb"
|
|
+ SSSD_MC_GROUP = "/var/db/sss/mc/group"
|
|
+ SSSD_MC_PASSWD = "/var/db/sss/mc/passwd"
|
|
+ SSSD_MC_INITGROUPS = "/var/db/sss/mc/initgroups"
|
|
+ SSSD_MC_SID = "/var/db/sss/mc/sid"
|
|
+ SSSD_PIPES = "/var/db/sss/pipes"
|
|
+ SSSD_PUBCONF_DIR = "/var/db/sss/pubconf"
|
|
+ SSSD_PUBCONF_KNOWN_HOSTS = "/var/db/sss/pubconf/known_hosts"
|
|
+ SSSD_PUBCONF_KRB5_INCLUDE_D_DIR = "/var/db/sss/pubconf/krb5.include.d/"
|
|
+ SSSD_KEYTABS_DIR = "/var/db/sss/keytabs"
|
|
+ SSSD_SECRETS = "/var/db/sss/secrets/secrets.ldb"
|
|
+
|
|
+ DSCTL = "%%LOCALBASE%%/bin/dsctl"
|
|
+
|
|
+ VAR_LIB_DIRSRV = "/var/db/dirsrv"
|
|
+ VAR_LIB_DIRSRV_INSTANCE_SCRIPTS_TEMPLATE = "/var/db/dirsrv/scripts-%s"
|
|
+ VAR_LIB_SLAPD_INSTANCE_DIR_TEMPLATE = "/var/db/dirsrv/slapd-%s"
|
|
+ SLAPD_INSTANCE_BACKUP_DIR_TEMPLATE = "/var/db/dirsrv/slapd-%s/bak/%s"
|
|
+ SLAPD_INSTANCE_DB_DIR_TEMPLATE = "/var/db/dirsrv/slapd-%s/db/%s"
|
|
+ SLAPD_INSTANCE_LDIF_DIR_TEMPLATE = "/var/db/dirsrv/slapd-%s/ldif"
|
|
+ VAR_RUN_DIRSRV_DIR = "/var/run/dirsrv"
|
|
+ DIRSRV_LOCK_DIR = "/var/run/dirsrv"
|
|
+
|
|
+ HTTPD = "%%LOCALBASE%%/sbin/httpd"
|
|
+ ETC_HTTPD_DIR = "%%LOCALBASE%%/etc/apache24"
|
|
+ HTTPD_ALIAS_DIR = "%%LOCALBASE%%/etc/apache24/alias"
|
|
+ GSSAPI_SESSION_KEY = "%%LOCALBASE%%/etc/apache24/alias/ipasession.key"
|
|
+ HTTPD_CONF_D_DIR = "%%LOCALBASE%%/etc/apache24/Includes/"
|
|
+ HTTPD_IPA_WSGI_MODULES_CONF = "%%LOCALBASE%%/etc/apache24/modules.d/290_freeipa.conf"
|
|
+ HTTPD_IPA_ENVVARS_CONF = "%%LOCALBASE%%/etc/apache24/envvars.d/ipa.env"
|
|
+ HTTPD_IPA_RC_CONF = "%%LOCALBASE%%/etc/rc.conf.d/apache24/ipa"
|
|
+ HTTPD_IPA_CONF = "%%LOCALBASE%%/etc/apache24/Includes/ipa.conf"
|
|
+ HTTPD_IPA_KDCPROXY_CONF = "%%LOCALBASE%%/etc/ipa/kdcproxy/ipa-kdc-proxy.conf"
|
|
+ HTTPD_IPA_KDCPROXY_CONF_SYMLINK = "%%LOCALBASE%%/etc/apache24/Includes/ipa-kdc-proxy.conf"
|
|
+ HTTPD_IPA_PKI_PROXY_CONF = "%%LOCALBASE%%/etc/apache24/Includes/ipa-pki-proxy.conf"
|
|
+ HTTPD_IPA_REWRITE_CONF = "%%LOCALBASE%%/etc/apache24/Includes/ipa-rewrite.conf"
|
|
+ HTTPD_NSS_CONF = "%%LOCALBASE%%/etc/apache24/Includes/nss.conf"
|
|
+ HTTPD_PASSWORD_CONF = "%%LOCALBASE%%/etc/apache24/password.conf"
|
|
+ HTTPD_SSL_CONF = "%%LOCALBASE%%/etc/apache24/extra/httpd-ssl.conf"
|
|
+ HTTPD_SSL_SITE_CONF = "%%LOCALBASE%%/etc/apache24/extra/httpd-ssl.conf"
|
|
+ HTTPD_IPA_SSL_CONF_SYMLINK = "%%LOCALBASE%%/etc/apache24/Includes/ipa-ssl.conf"
|
|
+ OLD_IPA_KEYTAB = "%%LOCALBASE%%/etc/apache24/ipa.keytab"
|
|
+ OLD_KRA_AGENT_PEM = "%%LOCALBASE%%/etc/apache24/alias/kra-agent.pem"
|
|
+ WSGI_PREFIX_DIR = "/var/run/httpd/wsgi"
|
|
+ IPA_HTTPD_KDCPROXY = "%%LOCALBASE%%/libexec/ipa/ipa-httpd-kdcproxy"
|
|
+ IPA_HTTPD_PASSWD_READER = "%%LOCALBASE%%/libexec/ipa/ipa-httpd-pwdreader"
|
|
+
|
|
+ BIN_CURL = "%%LOCALBASE%%/bin/curl"
|
|
+ CERTMONGER = "%%LOCALBASE%%/sbin/certmonger"
|
|
+ GPG2 = "%%LOCALBASE%%/bin/gpg"
|
|
+ GPG_AGENT = "%%LOCALBASE%%/bin/gpg-agent"
|
|
+ IPA_DNS_INSTALL = "%%LOCALBASE%%/sbin/ipa-dns-install"
|
|
+ IPA_REPLICA_CONNCHECK = "%%LOCALBASE%%/sbin/ipa-replica-conncheck"
|
|
+ IPA_SERVER_UPGRADE = "%%LOCALBASE%%/sbin/ipa-server-upgrade"
|
|
+ KDESTROY = "%%LOCALBASE%%/bin/kdestroy"
|
|
+ KINIT = "%%LOCALBASE%%/bin/kinit"
|
|
+ KTUTIL = "%%LOCALBASE%%/bin/ktutil"
|
|
+ NET = "%%LOCALBASE%%/bin/net"
|
|
+ NSUPDATE = "%%LOCALBASE%%/bin/nsupdate"
|
|
+ SMBD = "%%LOCALBASE%%/sbin/smbd"
|
|
+ SSSCTL = "%%LOCALBASE%%/sbin/sssctl"
|
|
+ SSS_SSH_AUTHORIZEDKEYS = "%%LOCALBASE%%/bin/sss_ssh_authorizedkeys"
|
|
+ SSS_SSH_KNOWNHOSTS = "%%LOCALBASE%%/bin/sss_ssh_knownhosts"
|
|
+ SSS_SSH_KNOWNHOSTSPROXY = "%%LOCALBASE%%/bin/sss_ssh_knownhostsproxy"
|
|
+ TDBTOOL = "%%LOCALBASE%%/bin/tdbtool"
|
|
+
|
|
+ IPA_CACERT_MANAGE = "%%LOCALBASE%%/sbin/ipa-cacert-manage"
|
|
+ IPA_GETCERT = "%%LOCALBASE%%/bin/ipa-getcert"
|
|
+
|
|
+ CHRONYC = "%%LOCALBASE%%/bin/chronyc"
|
|
+ CHRONYD = "%%LOCALBASE%%/sbin/chronyd"
|
|
+ CHRONY_CONF = "%%LOCALBASE%%/etc/chrony.conf"
|
|
+
|
|
+ SYSTEMCTL = None
|
|
+ SYSTEMD_TMPFILES = None
|
|
+ SBIN_INETD = "/usr/sbin/inetd"
|
|
+ SBIN_SERVICE = "/usr/sbin/service"
|
|
+ SBIN_SYSRC = "/usr/sbin/sysrc"
|
|
+
|
|
+
|
|
+paths = FreeBSDPathNamespace()
|