freeipa/ipaclient/install
Florence Blanc-Renaud 3cf9979aec ipa-client-install: use sshd drop-in configuration
sshd 8.2+ now supports the "Include" keyword in sshd_config and
ships by default /etc/ssh/sshd_config with
"Include /etc/ssh/sshd_config.d/*"

As fedora 32 provides a config file in that directory (05-redhat.conf) with
ChallengeResponseAuthentication no
that is conflicting with IPA client config, ipa-client-install now needs
to make its config changes in a drop-in file read before 05-redhat.conf
(the files are read in lexicographic order and the first setting wins).

There is no need to handle upgrades from sshd < 8.2: if openssh-server
detects a customisation in /etc/ssh/sshd_config, it will not update
the file but create /etc/ssh/sshd_config.rpmnew and ask the admin
to manually handle the config upgrade.

Fixes: https://pagure.io/freeipa/issue/8304
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2020-06-23 11:11:46 +02:00
..
__init__.py ipa-client-install: move client install to module 2016-11-11 12:13:56 +01:00
automount.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
client.py ipa-client-install: use sshd drop-in configuration 2020-06-23 11:11:46 +02:00
ipa_certupdate.py ipa-certupdate removes all CA certs from db before adding new ones 2020-01-28 13:05:31 -05:00
ipa_client_automount.py ipa-client-automount: call save_domain() for each change 2020-02-14 09:33:43 +02:00
ipa_client_install.py Drop list of return values to be ignored in AdminTool 2019-06-07 11:24:45 +02:00
ipa_client_samba.py ipa-client-samba: map domain sid of trust domain properly for display 2019-12-13 17:33:33 +02:00
ipa_epn.py IPA-EPN: Don't treat givenname differently 2020-06-10 11:22:58 -04:00
ipachangeconf.py Move ipachangeconf from ipaclient.install to ipapython 2019-08-28 22:15:50 -04:00
ipadiscovery.py Make IPADiscovery available in PyPI packages 2019-03-01 11:44:27 +01:00
sssd.py ipaclient: Remove --no-sssd and --no-ac options 2018-08-13 12:23:53 +02:00
timeconf.py Moving prompt for NTP options to install_check 2019-05-22 18:20:22 +02:00