Re: [Freeipa-users] ipa-client-install: please look for SELINUX=disabled

2017-05-15 Thread Lukas Slebodnik
On (13/05/17 06:52), Harald Dunkel wrote: >Hi folks, > >RHEL 7.3, sssd 1.14.0: > >If /etc/selinux/config says "SELINUX=disabled", then pam seems to fail >(without telling why) and users cannot login. *Extremely* painful. > >Do you think ipa-client-install could add > > selinux_provider =

[Freeipa-users] ipa-client-install: please look for SELINUX=disabled

2017-05-12 Thread Harald Dunkel
Hi folks, RHEL 7.3, sssd 1.14.0: If /etc/selinux/config says "SELINUX=disabled", then pam seems to fail (without telling why) and users cannot login. *Extremely* painful. Do you think ipa-client-install could add selinux_provider = none to the generated sssd.conf file, if selinux is