authconfig component changed its behavior. It no longer starts and enables SSSD daemon when --enablesssd and --enablesssdauth options are used. It only enables the PAM module and adds SSSD to nsswitch.
Enable SSSD on new client/server installs manually. Also make sure that we stop&disable SSSD when we delete the configuration. https://fedorahosted.org/freeipa/ticket/3307 -- Martin Kosek <mko...@redhat.com> Senior Software Engineer - Identity Management Team Red Hat Inc.
From 0780a446947e9e8da210a1a6b5577dd389b93729 Mon Sep 17 00:00:00 2001 From: Martin Kosek <mko...@redhat.com> Date: Tue, 18 Dec 2012 13:22:40 +0100 Subject: [PATCH] Enable SSSD on client install authconfig component changed its behavior. It no longer starts and enables SSSD daemon when --enablesssd and --enablesssdauth options are used. It only enables the PAM module and adds SSSD to nsswitch. Enable SSSD on new client/server installs manually. Also make sure that we stop&disable SSSD when we delete the configuration. https://fedorahosted.org/freeipa/ticket/3307 --- ipa-client/ipa-install/ipa-client-install | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install index 7c3290298a6976e30a88ccaa39ecb54f313f5370..a38c82806c1aa47f5e4dced1e8c727e543406c38 100755 --- a/ipa-client/ipa-install/ipa-client-install +++ b/ipa-client/ipa-install/ipa-client-install @@ -454,6 +454,18 @@ def uninstall(options, env): root_logger.info("Redundant SSSD configuration file " + "/etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted") + sssd = ipaservices.service('sssd') + try: + sssd.stop() + except CalledProcessError: + root_logger.warning("SSSD service could not be stopped") + + try: + sssd.disable() + except CalledProcessError, e: + root_logger.warning( + "Failed to disable automatic startup of the SSSD daemon: %s", e) + if fstore.has_files(): root_logger.info("Restoring client configuration files") ipaservices.restore_network_configuration(fstore, statestore) @@ -1855,6 +1867,12 @@ def install(options, env, fstore, statestore): except CalledProcessError: root_logger.warning("SSSD service restart was unsuccessful.") + try: + sssd.enable() + except CalledProcessError, e: + root_logger.warning( + "Failed to enable automatic startup of the SSSD daemon: %s", e) + if not options.sssd: #Modify pam to add pam_krb5 only when sssd is not in use auth_config.reset() -- 1.7.11.7
_______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
