diff options
author | Martin Kosek <mkosek@redhat.com> | 2012-12-18 13:22:40 +0100 |
---|---|---|
committer | Martin Kosek <mkosek@redhat.com> | 2012-12-18 17:48:59 +0100 |
commit | b3ea7d2d626da9ffb86777bed9bbdf8d96849bc5 (patch) | |
tree | 20fb4bac36b625daeed68335305ce6e37017d160 /ipa-client/ipa-install | |
parent | 389854756b717b171430bf2f8c57f310d05a5188 (diff) | |
download | freeipa.git-b3ea7d2d626da9ffb86777bed9bbdf8d96849bc5.tar.gz freeipa.git-b3ea7d2d626da9ffb86777bed9bbdf8d96849bc5.tar.xz freeipa.git-b3ea7d2d626da9ffb86777bed9bbdf8d96849bc5.zip |
Enable SSSD on client install
authconfig component changed its behavior. It no longer starts and
enables SSSD daemon when --enablesssd and --enablesssdauth options
are used. It only enables the PAM module and adds SSSD to nsswitch.
Enable SSSD on new client/server installs manually. Also make sure
that we stop&disable SSSD when we delete the configuration.
https://fedorahosted.org/freeipa/ticket/3307
Diffstat (limited to 'ipa-client/ipa-install')
-rwxr-xr-x | ipa-client/ipa-install/ipa-client-install | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install index 7c329029..a38c8280 100755 --- a/ipa-client/ipa-install/ipa-client-install +++ b/ipa-client/ipa-install/ipa-client-install @@ -454,6 +454,18 @@ def uninstall(options, env): root_logger.info("Redundant SSSD configuration file " + "/etc/sssd/sssd.conf was moved to /etc/sssd/sssd.conf.deleted") + sssd = ipaservices.service('sssd') + try: + sssd.stop() + except CalledProcessError: + root_logger.warning("SSSD service could not be stopped") + + try: + sssd.disable() + except CalledProcessError, e: + root_logger.warning( + "Failed to disable automatic startup of the SSSD daemon: %s", e) + if fstore.has_files(): root_logger.info("Restoring client configuration files") ipaservices.restore_network_configuration(fstore, statestore) @@ -1855,6 +1867,12 @@ def install(options, env, fstore, statestore): except CalledProcessError: root_logger.warning("SSSD service restart was unsuccessful.") + try: + sssd.enable() + except CalledProcessError, e: + root_logger.warning( + "Failed to enable automatic startup of the SSSD daemon: %s", e) + if not options.sssd: #Modify pam to add pam_krb5 only when sssd is not in use auth_config.reset() |