On 11/11/2011 11:35 AM, Ondrej Hamada wrote:
> On 11/11/2011 03:25 PM, Alexander Bokovoy wrote:
>> On Fri, 11 Nov 2011, Rob Crittenden wrote:
>>> Ondrej Hamada wrote:
>>>> https://fedorahosted.org/freeipa/ticket/2063
>>>> In order to check presence of nss_ldap when installing client with
>>>> '--no-sssd' option there was added code into ipa-client-install. Check
>>>> is base on existence of nss_ldap configuration files. This
>>>> configuration
>>>> could be in 'etc/ldap.conf', '/etc/nss_ldap.conf' or
>>>> '/etc/libnss_ldap.conf'. Presence of any of these files is
>>>> considered as
>>>> success otherwise failure.
>>> I think we should check for nslcd.conf as well and report that
>>> neither nss-ldap nor nss-pam-ldapd are installed.
>> We have already code in configure_ldap_config() and
>> configure_nslcd_conf that checks all these different files and after
>> configuration reports what was configured.
>> I would rather did a commonalization of detection instead of
>> duplicating the code. We can re-use result of detecting what exists
>> later in configure_{ldap,nslcd}_config().
> I'll do it, but I have question:
> configure_ldap_config() also checks whether file 'pam_ldap.conf'
> exists. Is installed pam_ldap package without nss_ldap enough to allow
> ipa-client installation with --no-sssd option?
pam-ldap by itself is not enough. There should be something for nss. But
there are different combinations of packages depending upon RHEL version. 

Thank you,
Dmitri Pal

Sr. Engineering Manager IPA project,
Red Hat Inc.

Looking to carve out IT costs?

Freeipa-devel mailing list

Reply via email to