On (03/06/16 09:07), Stephen Gallagher wrote: >On 05/13/2016 10:29 AM, Lukas Slebodnik wrote: >> On (11/05/16 17:35), Lukas Slebodnik wrote: >>> On (10/05/16 17:06), Jakub Hrozek wrote: >>>> On Tue, May 10, 2016 at 09:51:18AM -0400, Stephen Gallagher wrote: >>>>> On 05/10/2016 09:45 AM, Jakub Hrozek wrote: ><snip> >>> This basic sssd configuration expects that proxy provider will >>> be installed by default. And that's not reality. >>> >>> It's only installed with meta-package sssd. >>> But It will not work with minimal installation of sssd. >>> "yum install -y sssd-ldap" >>> or even just "sssd-common" >>> >>> If should start without failures and with default configuration >>> then we should change pacakging as well and recommend similar packaging >>> change >>> to other downstreams (debian, opensuse ...) > > >Sorry it took me so long to reply on this. I should have examined this more >closely. It was probably a bad idea to have the proxy provided be the default It wasn't a bad idea per se. I realized this issue later when I ran downstream tests and noticed AVCs.
>setup, since it might or might not be installed (and we probably don't want to >force its inclusion). I guess it would make more sense for the native 'local' >provider to be the default. > maybe. >As for the AVC, I spotted that in my testing and I think I reported it to the >selinux-policy package, but I'm not certain (I can't find it right now). > If you cannot find BZ then let us know whether we should file a bug or you will. LS _______________________________________________ sssd-devel mailing list sssd-devel@lists.fedorahosted.org https://lists.fedorahosted.org/admin/lists/sssd-devel@lists.fedorahosted.org
