Some plugins and scripts still use paths.IPA_NSSDB_DIR instead of api.env.nss_dir. The use of paths.IPA_NSSDB_DIR renders nss_dir override in bootstrap pointless.
paths.IPA_NSSDB_DIR
api.env.nss_dir
nss_dir
I also like to suggest that bootstrap() should treat the location of nssdb like the location of default.conf. It should default to nssdb relative to the confdir option. This makes it much easier to bootstrap a client with a local configuration directory.
./ipaserver/install/ipa_backup.py: os.path.join(paths.IPA_NSSDB_DIR, file) ./ipaserver/install/ipa_restore.py: filename = os.path.join(paths.IPA_NSSDB_DIR, basename) ./client/ipa-client-install: ipa_db = certdb.NSSDatabase(paths.IPA_NSSDB_DIR) ./client/ipa-client-install: certmonger.stop_tracking(paths.IPA_NSSDB_DIR, ./client/ipa-client-install: passwd_fname = os.path.join(paths.IPA_NSSDB_DIR, 'pwdfile.txt') ./client/ipa-client-install: certmonger.request_cert(nssdb=paths.IPA_NSSDB_DIR, ./client/ipa-client-install: ipa_db = certdb.NSSDatabase(paths.IPA_NSSDB_DIR) ./ipaclient/plugins/vault.py: current_dbdir = paths.IPA_NSSDB_DIR ./ipaclient/plugins/vault.py: current_dbdir = paths.IPA_NSSDB_DIR ./ipaclient/plugins/otptoken.py: handler = HTTPSHandler(dbdir=paths.IPA_NSSDB_DIR, ./ipaclient/ipa_certupdate.py: ipa_db = certdb.NSSDatabase(paths.IPA_NSSDB_DIR) ./ipapython/certdb.py: db = NSSDatabase(paths.IPA_NSSDB_DIR) ./ipapython/certdb.py: ipa_db = NSSDatabase(paths.IPA_NSSDB_DIR) ./install/tools/ipa-replica-conncheck: nss_dir = paths.IPA_NSSDB_DIR
This looks as a part of the bigger RFe I filed - #6389.
master:
Metadata Update from @cheimes: - Issue assigned to someone - Issue set to the milestone: FreeIPA 4.5
Login to comment on this ticket.