[Freeipa-users] why default shell /bin/sh

2013-06-06 Thread Natxo Asenjo
hi,

just interested. We have noticed that ldap users have this PS1 envvar:
PS1='\s-\v\$ ' instead of the usual [\u@\h \W]\$

This is a confusing moment. Changing the shell to /bin/bash solves this,
but maybe this is not optimal for other systems or users.
--
Groeten,
natxo

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] why default shell /bin/sh

2013-06-06 Thread Rob Crittenden

Natxo Asenjo wrote:

hi,

just interested. We have noticed that ldap users have this PS1 envvar:
PS1='\s-\v\$ ' instead of the usual [\u@\h \W]\$

This is a confusing moment. Changing the shell to /bin/bash solves this,
but maybe this is not optimal for other systems or users.


Lowest-common denominator. One can configure all sorts of *nix-like 
systems to use IPA for authentication so we needed a default shell that 
is available on all systems and that is the bourne shell.


This is configurable in the IPA configuration, and you can override the 
shell in sssd as well.


rob

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] why default shell /bin/sh

2013-06-06 Thread Jakub Hrozek
On Thu, Jun 06, 2013 at 10:30:34AM -0400, Rob Crittenden wrote:
 Natxo Asenjo wrote:
 hi,
 
 just interested. We have noticed that ldap users have this PS1 envvar:
 PS1='\s-\v\$ ' instead of the usual [\u@\h \W]\$
 
 This is a confusing moment. Changing the shell to /bin/bash solves this,
 but maybe this is not optimal for other systems or users.
 
 Lowest-common denominator. One can configure all sorts of *nix-like systems
 to use IPA for authentication so we needed a default shell that is available
 on all systems and that is the bourne shell.
 
 This is configurable in the IPA configuration, and you can override the
 shell in sssd as well.
 
 rob

yep, see the override_shell option for a complete client side override and
allowed_shells/shell_fallback if you need more control over which shell
gets used. All the options are in man sssd.conf(5).

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] why default shell /bin/sh

2013-06-06 Thread Martin Kosek
On 06/06/2013 04:37 PM, Jakub Hrozek wrote:
 On Thu, Jun 06, 2013 at 10:30:34AM -0400, Rob Crittenden wrote:
 Natxo Asenjo wrote:
 hi,

 just interested. We have noticed that ldap users have this PS1 envvar:
 PS1='\s-\v\$ ' instead of the usual [\u@\h \W]\$

 This is a confusing moment. Changing the shell to /bin/bash solves this,
 but maybe this is not optimal for other systems or users.

 Lowest-common denominator. One can configure all sorts of *nix-like systems
 to use IPA for authentication so we needed a default shell that is available
 on all systems and that is the bourne shell.

 This is configurable in the IPA configuration, and you can override the
 shell in sssd as well.

 rob
 
 yep, see the override_shell option for a complete client side override and
 allowed_shells/shell_fallback if you need more control over which shell
 gets used. All the options are in man sssd.conf(5).
 

Yup, in FreeIPA admin just need to change global config object:


# ipa config-show
...
  Default shell: /bin/sh
...

# ipa config-mod --defaultshell=/bin/bash
...
  Default shell: /bin/bash
...

Martin

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] why default shell /bin/sh

2013-06-06 Thread Natxo Asenjo
On Thu, Jun 6, 2013 at 4:30 PM, Rob Crittenden rcrit...@redhat.com wrote:
 Natxo Asenjo wrote:

 hi,

 just interested. We have noticed that ldap users have this PS1 envvar:
 PS1='\s-\v\$ ' instead of the usual [\u@\h \W]\$

 This is a confusing moment. Changing the shell to /bin/bash solves this,
 but maybe this is not optimal for other systems or users.


 Lowest-common denominator. One can configure all sorts of *nix-like systems
 to use IPA for authentication so we needed a default shell that is available
 on all systems and that is the bourne shell.

thanks all for your explanations.

In the bash man page I found this little gem:

--norc Do  not  read  and  execute the personal initialization file
~/.bashrc if the shell is interactive.  This option is on by default
if the shell is
  invoked as sh.

So this is the problem, when using /bin/sh (which in rhel is a symlink
to /bin/bash), the profile files do not get executed.

We do have other systems than rhel/fedora/centos, but none where users
interactively login. So I am just going to go ahead and make my life a
little more pleasant with a minder spartan shell :-)

-- 
groet,
natxo

___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users


Re: [Freeipa-users] why default shell /bin/sh

2013-06-06 Thread KodaK
On Thu, Jun 6, 2013 at 9:30 AM, Rob Crittenden rcrit...@redhat.com wrote:


 Lowest-common denominator. One can configure all sorts of *nix-like
 systems to use IPA for authentication so we needed a default shell that is
 available on all systems and that is the bourne shell.


I have a bunch of AIX machines, the users on those demand ksh, mostly.
 Luckily I have ksh for Linux and bash for AIX to cover everyone, but I'm
tempted to give them all csh just to teach them a lesson.
___
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users