oddjob is a D-Bus service which performs particular tasks for clients that
connect to it and issue requests over the system message bus. Each task is
run by a helper started by the oddjobd daemon under a configurable set of
access controls, so unprivileged clients can trigger specific privileged
operations without being granted broad privileges.
FreeIPA uses oddjob to run privileged server-side helpers (AD trust setup,
SID configuration and replica connection checks).
oddjob installed a D-Bus system policy. Reload the system message bus so
oddjobd is allowed to claim its bus name:
service dbus reload
To run the daemon standalone (FreeIPA starts it for you via ipactl):
sysrc oddjobd_enable=YES
service oddjobd start
sysutils/oddjob: Add new Port
oddjob is a D-Bus service (oddjobd) that runs a fixed set of privileged
jobs on behalf of unprivileged client applications. FreeIPA uses it for
oddjob-mkhomedir, which creates a user's home directory on first login.
The port disables the systemd, sysvinit, Python and SELinux features
that do not apply on FreeBSD and ships a native rc script.
WWW: https://codeberg.org/freeipa/oddjob
Sponsored by: Netzkommune GmbH
Required for: FreeIPA server port