Christian Heimes 8b0f3595fd Allow ipaapi user to access SSSD's info pipe ...

For smart card authentication, ipaapi must be able to access to sss-ifp.
During installation and upgrade, the ipaapi user is now added to
[ifp]allowed_uids.

The commit also fixes two related issues:

* The server upgrade code now enables ifp service in sssd.conf. The
  existing code modified sssd.conf but never wrote the changes to disk.
* sssd_enable_service() no longer fails after it has detected an
  unrecognized service.

Fixes: https://pagure.io/freeipa/issue/7751
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2018-11-07 16:28:35 +01:00

..

__init__.py

Remove DL0 specific code from __init__ in ipaserver/install/server

2018-09-12 13:11:21 +02:00

install.py

Remove options.promote from install in ipaserver/install/server/install

2018-09-12 13:11:21 +02:00

replicainstall.py

Pass a list of values into add_master_dns_records

2018-11-01 13:08:58 +01:00

upgrade.py

Allow ipaapi user to access SSSD's info pipe

2018-11-07 16:28:35 +01:00