On redhat-based platforms rely on authselect to enable sudo

The default platform task enable_sssd_sudo() writes directly
to nsswitch.conf to enable sudo. This isn't necessary to do on
systems with authselect where we already pass in with-sudo as a
profile option.

Override the default function with does a direct write with a no-op.

https://pagure.io/freeipa/issue/8755

Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
This commit is contained in:
Rob Crittenden 2021-10-13 17:54:12 -04:00
parent bacddb8288
commit 5856f10733

View File

@ -756,6 +756,9 @@ class RedHatTaskNamespace(BaseTaskNamespace):
"{}.module".format(name))
for name, _module, _disabled in PKCS11_MODULES)
def enable_sssd_sudo(self, _fstore):
"""sudo enablement is handled by authselect"""
def enable_ldap_automount(self, statestore):
"""
Point automount to ldap in nsswitch.conf.