Re: F28 System Wide Change: Make authselect default tool instead of authconfig

On 01/05/2018 04:43 PM, John Florian wrote: On Fri, 2018-01-05 at 16:02 +0100, Pavel Březina wrote: On 01/05/2018 03:14 PM, John Florian wrote: On Fri, 2018-01-05 at 14:50 +0100, Jan Kurik wrote: The tool is packaged with a default profile set that is fully supported. If an administrator has

Re: F28 System Wide Change: Make authselect default tool instead of authconfig

On 01/05/2018 04:54 PM, Tom Hughes wrote: On 05/01/18 15:02, Pavel Březina wrote: Yes, there is a data dir: /usr/share/authselect/ Description of these directories may be seen in the man page, currently at this upstream link: https://github.com/pbrezina/authselect/blob/master/src/man

Re: F28 System Wide Change: Make authselect default tool instead of authconfig

On 01/05/2018 03:14 PM, John Florian wrote: On Fri, 2018-01-05 at 14:50 +0100, Jan Kurik wrote: The tool is packaged with a default profile set that is fully supported. If an administrator has different needs they can create a custom profile and make it accessible in authselect by dropping it

Re: F28 System Wide Change: Make authselect default tool instead of authconfig

On 01/09/2018 10:36 PM, Zbigniew Jędrzejewski-Szmek wrote: On Tue, Jan 09, 2018 at 04:30:56PM +0100, Pavel Březina wrote: On 01/05/2018 05:21 PM, Zbigniew Jędrzejewski-Szmek wrote: On Fri, Jan 05, 2018 at 02:50:45PM +0100, Jan Kurik wrote: = System Wide Change: Make authselect default tool

Re: F28 System Wide Change: Make authselect default tool instead of authconfig

On 01/05/2018 05:21 PM, Zbigniew Jędrzejewski-Szmek wrote: On Fri, Jan 05, 2018 at 02:50:45PM +0100, Jan Kurik wrote: = System Wide Change: Make authselect default tool instead of authconfig = https://fedoraproject.org/wiki/Changes/AuthselectAsDefault Does this change do anything to reduce

Re: F28 System Wide Change: Make authselect default tool instead of authconfig

On 01/05/2018 02:50 PM, Jan Kurik wrote: = System Wide Change: Make authselect default tool instead of authconfig = https://fedoraproject.org/wiki/Changes/AuthselectAsDefault Change owner(s): * Pavel Březina Replace authconfig with authselect and make authselect a default tool to configure

Re: authselect: what to do with systemd and nss-mdns that modify nsswith.conf

On 12/6/18 3:27 PM, Tom Hughes wrote: On 06/12/2018 14:11, Florian Weimer wrote: * Tom Hughes: Based on my experimentation with an F29 live image last week both nss-systemd and nss-myhostname are in the default configuration. Not in the file shipped by the glibc package. Well something

authselect: what to do with systemd and nss-mdns that modify nsswith.conf

Hello, systemd and nss-mdns packages modifies nsswitch.conf in their %post scriptlets which creates conflicts with authselect on systems that are configured by authselect. This needs to be solved somehow. Originally, I wanted to create an authselect command that can be used by packages on

Re: authselect: what to do with systemd and nss-mdns that modify nsswith.conf

On 12/6/18 1:31 PM, Florian Weimer wrote: * Pavel Březina: systemd and nss-mdns packages modifies nsswitch.conf in their %post scriptlets which creates conflicts with authselect on systems that are configured by authselect. This needs to be solved somehow. Other packagers (notably sssd) have

Re: authselect: what to do with systemd and nss-mdns that modify nsswith.conf

On 12/6/18 2:36 PM, Lennart Poettering wrote: On Do, 06.12.18 12:20, Pavel Březina (pbrez...@redhat.com) wrote: Hello, Heya! systemd and nss-mdns packages modifies nsswitch.conf in their %post scriptlets which creates conflicts with authselect on systems that are configured by authselect

Re: /etc/nssswitch.conf is supposed to be a symlink now?

On 11/28/18 4:37 PM, Robert Marcano wrote: On 11/28/18 11:20 AM, Ralf Corsepius wrote: On 11/28/18 3:45 PM, Florian Weimer wrote: * Richard W. M. Jones: Trying to track down a bug in IPP printing (https://bugzilla.redhat.com/show_bug.cgi?id=1653276). We're down a rabbit hole where it seems

Re: /etc/nssswitch.conf is supposed to be a symlink now?

On 11/28/18 3:52 PM, Tom Hughes wrote: On 28/11/2018 14:45, Florian Weimer wrote: * Richard W. M. Jones: Trying to track down a bug in IPP printing (https://bugzilla.redhat.com/show_bug.cgi?id=1653276). We're down a rabbit hole where it seems that in Fedora 29 /etc/nssswitch.conf ought to be

Re: /etc/nssswitch.conf is supposed to be a symlink now?

On 11/29/18 12:59 PM, Robert Marcano wrote: On 11/29/18 7:46 AM, Pavel Březina wrote: On 11/28/18 4:37 PM, Robert Marcano wrote: On 11/28/18 11:20 AM, Ralf Corsepius wrote: On 11/28/18 3:45 PM, Florian Weimer wrote: * Richard W. M. Jones: Trying to track down a bug in IPP printing (https

Re: /etc/nssswitch.conf is supposed to be a symlink now?

On 11/28/18 3:59 PM, Henrique Martins wrote: My configuration is different, just take as FYI. ... it seems that in Fedora 29 /etc/nssswitch.conf ought to be a symlink. This machine has been upgraded from F28 and this is not the case. AFAIK I have never edited the file. It is still a file

Re: /etc/nssswitch.conf is supposed to be a symlink now?

On 11/28/18 11:22 PM, Jan Pokorný wrote: On 28/11/18 11:48 -0400, Robert Marcano wrote: There is another thing I found wrong. The backed up nsswitch.conf has these lines appended (ckey and incomplete aliases line) after the real end of the original file (aliases: files): aliases:files

Re: /etc/nssswitch.conf is supposed to be a symlink now?

On 11/28/18 6:35 PM, Richard W.M. Jones wrote: On Wed, Nov 28, 2018 at 05:02:17PM +0100, Reindl Harald wrote: Am 28.11.18 um 15:45 schrieb Florian Weimer: * Richard W. M. Jones: Trying to track down a bug in IPP printing (https://bugzilla.redhat.com/show_bug.cgi?id=1653276). We're down a

Re: nsswitch.conf: list of module packages that enables themselves

On 11/26/18 2:21 PM, Stephen Gallagher wrote: On Mon, Nov 26, 2018 at 8:16 AM Pavel Březina wrote: This e-mail is long so I just put the question here before explanation: Do you know about any package that installs an nsswitch.conf module and automatically enables it in /etc/nsswitch.conf

nsswitch.conf: list of module packages that enables themselves

This e-mail is long so I just put the question here before explanation: Do you know about any package that installs an nsswitch.conf module and automatically enables it in /etc/nsswitch.conf? So far I have two packages - nss-mdns and systemd. Why? As you might have noticed, in Fedora 28 we

Re: nsswitch.conf: list of module packages that enables themselves

On 11/27/18 12:48 AM, Ian Kent wrote: On Mon, 2018-11-26 at 14:38 +0100, Pavel Březina wrote: On 11/26/18 2:21 PM, Stephen Gallagher wrote: On Mon, Nov 26, 2018 at 8:16 AM Pavel Březina wrote: This e-mail is long so I just put the question here before explanation: Do you know about any

Re: nsswitch.conf: list of module packages that enables themselves

On 11/26/18 8:24 PM, DJ Delorie wrote: Pavel B™ezina writes: Do you know about any package that installs an nsswitch.conf module and automatically enables it in /etc/nsswitch.conf? So far I have two packages - nss-mdns and systemd. I don't know about enabling, but it's easy to ask the

Re: authselect: what to do with systemd and nss-mdns that modify nsswith.conf

On 12/6/18 12:20 PM, Pavel Březina wrote: Hello, systemd and nss-mdns packages modifies nsswitch.conf in their %post scriptlets which creates conflicts with authselect on systems that are configured by authselect. This needs to be solved somehow. Originally, I wanted to create an authselect

authselect: owning configuration files under /etc/authselect

Hello list, Igor suggested in authselect pull request that authselect should own configuration files in /etc/authselect. See: https://src.fedoraproject.org/rpms/authselect/pull-request/5 More specifically: + %ghost %{_sysconfdir}/authselect/dconf-db + %ghost

vagrant can't up rawhide compose

I'm trying vagrant image of rawhide from [1], however vagrant is unable to bring the machine up. It gets always stuck on "==> client: Waiting for domain to get an IP address..." step. Other vagrant boxes (Fedora 29 till Fedora 31) from these cloud composes works well. I tried to upgrade to

Re: vagrant can't up rawhide compose

On 11/6/19 4:23 PM, Vít Ondruch wrote: Isn't it this issue? https://bugzilla.redhat.com/show_bug.cgi?id=1759603 Vít It seems to be something different. I opened: https://bugzilla.redhat.com/show_bug.cgi?id=1771446 Dne 06. 11. 19 v 14:02 Pavel Březina napsal(a): I'm trying vagrant

Re: How to get proper nsswitch.conf?

On 2/14/20 8:19 PM, Michael Catanzaro wrote: On Thu, Feb 13, 2020 at 7:13 pm, Michael Catanzaro wrote: Why don't we have mymachines here? This is systemd module, right? There was some discussion about it in:

Re: Manual intervention required: broken /etc/nsswitch.conf and /etc/resolv.conf for F33 early adopters

On 9/14/20 12:11 PM, Kamil Paral wrote: On Fri, Sep 11, 2020 at 7:03 PM Michael Catanzaro > wrote: > If it is, what is the proper way to revert back to upstream defaults > in this case? Should I append "--force" to the command? (I don't want > to

Re: Fedora 34 Change proposal: Remove and deprecate nscd in favour of sssd and systemd-resolved (Self-Contained Change)

On 11/5/20 1:58 PM, Nico Kadel-Garcia wrote: On Thu, Nov 5, 2020 at 6:39 AM Petr Menšík wrote: No, no, NO again. nscd has no important active bugs in Fedora. I am not sure what bugs are mentioned, but just a few active bugs are on glibc component in Fedora. Therefore it seems just fine no

Re: sssd: No %post/%preun/%postun?!?

On 2/25/21 2:39 PM, Tom Hughes via devel wrote: On 25/02/2021 13:13, Richard Shaw wrote: Per the packaging guidelines these don't seem to be optional: https://docs.fedoraproject.org/en-US/packaging-guidelines/Scriptlets/#_systemd

Re: F34 gdm login prompt goes crazy when a fingerprint reader with no enrolled prints is present

On 3/2/21 4:25 PM, Ray Strode wrote: Hi, Ahh, okay. On Tue, Mar 2, 2021 at 9:31 AM Hans de Goede wrote: sudo authselect select minimal sudo authselect apply-changes Which results in the following /etc/pam.d/fingerprint-auth file: [hans@x1 linux]$ sudo cat /etc/pam.d/fingerprint-auth #

Re: F34 gdm login prompt goes crazy when a fingerprint reader with no enrolled prints is present

On 3/2/21 10:21 PM, Ray Strode wrote: Hi, On Tue, Mar 2, 2021, 11:20 AM Pavel Březina wrote: Can you reiterate the problem? The snippet above don't tell me much. Sorry, let me summarize (but also see Benjamin's email). Right now, if fingerprint auth is disabled in authselect, it's

Re: F34 gdm login prompt goes crazy when a fingerprint reader with no enrolled prints is present

On 3/3/21 6:11 PM, Hans de Goede wrote: Hi, On 3/2/21 5:20 PM, Pavel Březina wrote: On 3/2/21 4:25 PM, Ray Strode wrote: Hi, Ahh, okay. On Tue, Mar 2, 2021 at 9:31 AM Hans de Goede wrote: sudo authselect select minimal sudo authselect apply-changes Which results in the following /etc

Re: F34 gdm login prompt goes crazy when a fingerprint reader with no enrolled prints is present

On 3/3/21 11:02 AM, Pavel Březina wrote: On 3/2/21 10:21 PM, Ray Strode wrote: Hi, On Tue, Mar 2, 2021, 11:20 AM Pavel Březina wrote: Can you reiterate the problem? The snippet above don't tell me much. Sorry, let me summarize (but also see Benjamin's email). Right now, if fingerprint auth

Re: F34 gdm login prompt goes crazy when a fingerprint reader with no enrolled prints is present

On 3/4/21 5:11 PM, Hans de Goede wrote: Hi, On 3/4/21 11:50 AM, Pavel Březina wrote: On 3/3/21 6:11 PM, Hans de Goede wrote: Hi, On 3/2/21 5:20 PM, Pavel Březina wrote: On 3/2/21 4:25 PM, Ray Strode wrote: Hi, Ahh, okay. On Tue, Mar 2, 2021 at 9:31 AM Hans de Goede wrote: sudo

Re: F34 gdm login prompt goes crazy when a fingerprint reader with no enrolled prints is present

On 3/4/21 9:11 PM, Tom Seewald wrote: On rawhide I upgraded to authselect-1.2.2-3.fc35 yet I am still encountering the issue of gdm repeatedly complaining about authentication via fingerprint. I've checked and authselect is using the 'ssd' profile. Can you please provide output of

Re: F36 Change: Make Authselect Mandatory (System-Wide Change proposal)

On 10/12/21 7:12 PM, Michael Catanzaro wrote: This change is well-considered and includes detailed reasoning to support it. Looks good to me. I think the change proposal should be renamed, though, since authselect would clearly not *actually* be mandatory. Of course you'll risk severe

Re: F36 Change: Make Authselect Mandatory (System-Wide Change proposal)

On 10/12/21 5:45 PM, Neal Gompa wrote: On Tue, Oct 12, 2021 at 11:33 AM Ben Cotton wrote: === 1. It is difficult to deliver updates to configurations === FIles /etc/nsswitch.conf and /etc/pam.d/* are distributed as %config(noreplace) which means that they are configuration files and are only

Re: F36 Change: Make Authselect Mandatorry (System-Wide Change proposal)

On 10/13/21 3:17 PM, Michael Catanzaro wrote: On Wed, Oct 13 2021 at 10:22:14 AM +0200, Hans de Goede wrote: Making what IMHO is a poor default of always using sssd everywhere hardcoded even deeper into Fedora seems like a bad idea to me. I think we can fix this at the same time. Make

Re: F36 Change: Make Authselect Mandatory (System-Wide Change proposal)

On 10/14/21 14:57, Michael Catanzaro wrote: Enforce Authselect Configuration Consistency This sounds good, I updated the page title. Thank you. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to

Re: sssd-2.6.0 update in F35 breaks klist/kinit here

On 10/22/21 16:56, Ankur Sinha wrote: Hi folks, I just updated two F35 systems with updates-testing enabled and then `klist` etc. stopped working for me. Some investigation seems to indicate that the sssd-2.6.0 update may be involved---downgrading back to 2.5.2 immediately fixes the issue on

How to transfer file ownership

Hi fedora-devel, Fedora 36 change Enforce Authselect Configuration Consistency [1] is going to transfer file ownership from pam and glibc to authselect package. I wonder what is the correct way to do that? Is it sufficient to just remove/add the ownership in spec file %files? [1]

Re: How to transfer file ownership

On 11/22/21 12:39, Dominik 'Rathann' Mierzejewski wrote: On Monday, 22 November 2021 at 12:23, Pavel Březina wrote: Hi fedora-devel, Fedora 36 change Enforce Authselect Configuration Consistency [1] is going to transfer file ownership from pam and glibc to authselect package. I wonder what

Re: buildroot size growth

On 1/12/22 16:33, Vít Ondruch wrote: I have reported this here: https://bugzilla.redhat.com/show_bug.cgi?id=2039869 Should be fixed now with authselect-1.3.0-7.fc36. Vít Dne 05. 01. 22 v 11:30 Zbigniew Jędrzejewski-Szmek napsal(a): On Tue, Jan 04, 2022 at 12:25:36PM -0800, Adam

Re: F36 Change: Authselect: Move State Files to /etc (Self-Contained Change proposal)

On 1/19/22 11:04, Petr Pisar wrote: V Tue, Jan 18, 2022 at 12:32:52PM -0500, Ben Cotton napsal(a): Since /var should contain only files that can be safely removed, While I agree with your change, this statement is false. /var is for any files which are variable. Files which can be safely

Re: F36 Change: Authselect: Move State Files to /etc (Self-Contained Change proposal)

On 1/20/22 15:15, Vít Ondruch wrote: Dne 20. 01. 22 v 14:53 Pavel Březina napsal(a): On 1/20/22 12:52, Vít Ondruch wrote: I have naive question why these files are not static and in /usr. I mean, I am pretty sure I won't run `authselect select --force` or anything similar any time soon. So

Re: F36 Change: Authselect: Move State Files to /etc (Self-Contained Change proposal)

On 1/19/22 11:35, Petr Pisar wrote: V Wed, Jan 19, 2022 at 11:30:11AM +0100, Pavel Březina napsal(a): On 1/19/22 11:04, Petr Pisar wrote: V Tue, Jan 18, 2022 at 12:32:52PM -0500, Ben Cotton napsal(a): Since /var should contain only files that can be safely removed, While I agree with your

Re: F36 Change: Authselect: Move State Files to /etc (Self-Contained Change proposal)

On 1/19/22 12:40, Petr Pisar wrote: V Wed, Jan 19, 2022 at 11:55:48AM +0100, Pavel Březina napsal(a): On 1/19/22 11:35, Petr Pisar wrote: V Wed, Jan 19, 2022 at 11:30:11AM +0100, Pavel Březina napsal(a): On 1/19/22 11:04, Petr Pisar wrote: V Tue, Jan 18, 2022 at 12:32:52PM -0500, Ben Cotton

Re: F36 Change: Authselect: Move State Files to /etc (Self-Contained Change proposal)

On 1/19/22 17:06, Colin Walters wrote: On Wed, Jan 19, 2022, at 10:25 AM, Neal Gompa wrote: I agree, I think it should move to /usr/lib/sysimage/authselect instead. That would break the use case of running it on an image based (i.e. readonly /usr) system *client side*. We settled on

Re: F36 Change: Authselect: Move State Files to /etc (Self-Contained Change proposal)

uth /etc/authselect/.state/system-auth == Owner == * Name: [[User:pbrezina| Pavel Březina]] * Email: pbrez...@redhat.com == Detailed Description == These files are used by authselect to detect changes to the system nsswitch and PAM configurations when the configuration is updated with an upda

Re: F36 Change: Authselect: Move State Files to /etc (Self-Contained Change proposal)

On 1/18/22 19:03, Vitaly Zaitsev via devel wrote: On 18/01/2022 18:32, Ben Cotton wrote: Authselect state files moved from/var/lib/authselect to /etc/authselect/.state. Why /etc/authselect/.state and not /etc/authselect/state? Dot in front of the name means hidden file/directory. This is

Re: Bodhi API does not list f39 in pending releases

On 10/25/23 15:17, Clement Verna wrote: On Wed, 25 Oct 2023 at 12:55, Tomas Hrcka <mailto:thr...@redhat.com>> wrote: This looks like a bug in bodhi. the web UI lists correct releases pending and current. On Wed, Oct 25, 2023 at 11:57 AM Pavel Březina mailto:pbrez...@r

Re: Bodhi API does not list f39 in pending releases

On 10/25/23 19:14, Mattia Verga via devel wrote: Il 25/10/23 12:54, Tomas Hrcka ha scritto: This looks like a bug in bodhi. Actually, it was done that way on purpose. The HTML rendered output shows frozen releases in the same table of pending releases by a hack, but for API purposes I just

Bodhi API does not list f39 in pending releases

Hi, Fedora 39 stopped showing in pending releases (and is not in current either) when using: curl https://bodhi.fedoraproject.org/releases/?state=pending | jq There is Fedora 39 as flatpak and container, but not with id_prefix==FEDORA. Is this because it is now in final freeze or is it a

Re: RFC: Roadmap for DNF5 in Fedora 39 / invoking the Contingency Mechanism

On 7/13/23 23:59, Fabio Valentini wrote: Hi all, I'm opening this thread to trigger discussion of the roadmap for DNF5 in Fedora 39 - whether the switch still looks doable for this release, or whether it should be reverted for F39 and postponed to F40. +1 for postponing. We have hit issues

Re: RFC: Roadmap for DNF5 in Fedora 39 / invoking the Contingency Mechanism

is provisioning of multiple distributions for upstream PR CI via ansible), we would certainly hit more issues - or unimplemented functionality if you want to sugar coat it - that would require workarounds. On Fri, Jul 14, 2023 at 10:50 AM Pavel Březina <mailto:pbrez...@redhat.com>> wrote:

Re: RFC authselect: mdns or mdns-minimal

On 8/1/23 09:56, Zdenek Dohnal wrote: Hi Pavel, since authselect already advertises features for profiles regarding mdns as: --with-mdns4 --with-mdns6 it would be great if the profile feature logically matched what is going to be enabled - --with-mdn4 will put 'mdns4' into 'hosts' in

Re: RFC authselect: mdns or mdns-minimal

On 8/1/23 03:46, Adam Williamson wrote: On Mon, 2023-07-31 at 14:47 +0200, Pavel Březina wrote: Hi Fedora, I have this ticket opened against authselect: https://github.com/authselect/authselect/issues/334 I am not user of mdns myself, so I wonder if non-minimal version of mdns is something

Re: RFC authselect: mdns or mdns-minimal

in addition to existing 4 and 6 variants. On 01. 08. 23 12:10, Pavel Březina wrote: On 8/1/23 09:56, Zdenek Dohnal wrote: Hi Pavel, since authselect already advertises features for profiles regarding mdns as: --with-mdns4 --with-mdns6 it would be great if the profile feature logically matched

Re: RFC authselect: mdns or mdns-minimal

On 8/2/23 17:04, Petr Menšík wrote: I have created upstream pull request, which makes non-minimal plugins to behave like minimal plugins except it tries to find /etc/mdns.allow. If that file does not exist, it copies also reverse queries from minimal plugin. Here:

RFC authselect: mdns or mdns-minimal

Hi Fedora, I have this ticket opened against authselect: https://github.com/authselect/authselect/issues/334 I am not user of mdns myself, so I wonder if non-minimal version of mdns is something used and if it should be included in the authselect profiles (or even replace the minimal version).

Re: EncourageI686LeafRemoval Change: Please make sure it's actually a leaf package

On 1/15/24 14:57, Fabio Valentini wrote: Hi all, I've been made aware that there has been a cascade of packages that dropped i686 support in Rawhide, most of them referencing my EncourageI686LeafRemoval Change Proposal, but none of which *actually are* leaf packages:

Re: EncourageI686LeafRemoval Change: Please make sure it's actually a leaf package

On 1/15/24 19:55, Colin Walters wrote: On Mon, Jan 15, 2024, at 8:57 AM, Fabio Valentini wrote: Hi all, I've been made aware that there has been a cascade of packages that dropped i686 support in Rawhide, most of them referencing my EncourageI686LeafRemoval Change Proposal, but none of which