mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
Configure pam_krb5 on the client only if sssd is not configured
https://fedorahosted.org/freeipa/ticket/1775
This commit is contained in:
parent
bc83472b5b
commit
39a64a5272
@ -1052,13 +1052,14 @@ def install(options, env, fstore, statestore):
|
||||
auth_config.execute()
|
||||
print message
|
||||
|
||||
#Modify pam to add pam_krb5
|
||||
auth_config.reset()
|
||||
auth_config.enable("krb5").\
|
||||
add_option("update").\
|
||||
add_option("nostart")
|
||||
auth_config.execute()
|
||||
print "Kerberos 5 enabled"
|
||||
if not options.sssd:
|
||||
#Modify pam to add pam_krb5 only when sssd is not in use
|
||||
auth_config.reset()
|
||||
auth_config.enable("krb5").\
|
||||
add_option("update").\
|
||||
add_option("nostart")
|
||||
auth_config.execute()
|
||||
print "Kerberos 5 enabled"
|
||||
|
||||
# Update non-SSSD LDAP configuration after authconfig calls as it would
|
||||
# change its configuration otherways
|
||||
|
Loading…
Reference in New Issue
Block a user