On 11/11/2011 11:35 AM, Ondrej Hamada wrote: > On 11/11/2011 03:25 PM, Alexander Bokovoy wrote: >> On Fri, 11 Nov 2011, Rob Crittenden wrote: >>> Ondrej Hamada wrote: >>>> https://fedorahosted.org/freeipa/ticket/2063 >>>> >>>> In order to check presence of nss_ldap when installing client with >>>> '--no-sssd' option there was added code into ipa-client-install. Check >>>> is base on existence of nss_ldap configuration files. This >>>> configuration >>>> could be in 'etc/ldap.conf', '/etc/nss_ldap.conf' or >>>> '/etc/libnss_ldap.conf'. Presence of any of these files is >>>> considered as >>>> success otherwise failure. >>> I think we should check for nslcd.conf as well and report that >>> neither nss-ldap nor nss-pam-ldapd are installed. >> We have already code in configure_ldap_config() and >> configure_nslcd_conf that checks all these different files and after >> configuration reports what was configured. >> >> I would rather did a commonalization of detection instead of >> duplicating the code. We can re-use result of detecting what exists >> later in configure_{ldap,nslcd}_config(). >> > I'll do it, but I have question: > configure_ldap_config() also checks whether file 'pam_ldap.conf' > exists. Is installed pam_ldap package without nss_ldap enough to allow > ipa-client installation with --no-sssd option? > pam-ldap by itself is not enough. There should be something for nss. But there are different combinations of packages depending upon RHEL version.
-- Thank you, Dmitri Pal Sr. Engineering Manager IPA project, Red Hat Inc. ------------------------------- Looking to carve out IT costs? www.redhat.com/carveoutcosts/ _______________________________________________ Freeipa-devel mailing list [email protected] https://www.redhat.com/mailman/listinfo/freeipa-devel
