On 05/13/2016 10:29 AM, Lukas Slebodnik wrote: > On (11/05/16 17:35), Lukas Slebodnik wrote: >> On (10/05/16 17:06), Jakub Hrozek wrote: >>> On Tue, May 10, 2016 at 09:51:18AM -0400, Stephen Gallagher wrote: >>>> On 05/10/2016 09:45 AM, Jakub Hrozek wrote: <snip> >> This basic sssd configuration expects that proxy provider will >> be installed by default. And that's not reality. >> >> It's only installed with meta-package sssd. >> But It will not work with minimal installation of sssd. >> "yum install -y sssd-ldap" >> or even just "sssd-common" >> >> If should start without failures and with default configuration >> then we should change pacakging as well and recommend similar packaging >> change >> to other downstreams (debian, opensuse ...)
Sorry it took me so long to reply on this. I should have examined this more closely. It was probably a bad idea to have the proxy provided be the default setup, since it might or might not be installed (and we probably don't want to force its inclusion). I guess it would make more sense for the native 'local' provider to be the default. As for the AVC, I spotted that in my testing and I think I reported it to the selinux-policy package, but I'm not certain (I can't find it right now).
signature.asc
Description: OpenPGP digital signature
_______________________________________________ sssd-devel mailing list [email protected] https://lists.fedorahosted.org/admin/lists/[email protected]
