mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2026-08-10 04:58:03 -05:00
Florence Blanc-Renaud
3cf9979aec
sshd 8.2+ now supports the "Include" keyword in sshd_config and ships by default /etc/ssh/sshd_config with "Include /etc/ssh/sshd_config.d/*" As fedora 32 provides a config file in that directory (05-redhat.conf) with ChallengeResponseAuthentication no that is conflicting with IPA client config, ipa-client-install now needs to make its config changes in a drop-in file read before 05-redhat.conf (the files are read in lexicographic order and the first setting wins). There is no need to handle upgrades from sshd < 8.2: if openssh-server detects a customisation in /etc/ssh/sshd_config, it will not update the file but create /etc/ssh/sshd_config.rpmnew and ask the admin to manually handle the config upgrade. Fixes: https://pagure.io/freeipa/issue/8304 Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
110 lines
2.4 KiB
Makefile
110 lines
2.4 KiB
Makefile
NULL =
|
|
|
|
SUBDIRS = \
|
|
advise \
|
|
profiles \
|
|
schema.d \
|
|
$(NULL)
|
|
|
|
appdir = $(IPA_DATA_DIR)
|
|
dist_app_DATA = \
|
|
05rfc2247.ldif \
|
|
15rfc2307bis.ldif \
|
|
15rfc4876.ldif \
|
|
60kerberos.ldif \
|
|
60samba.ldif \
|
|
60ipaconfig.ldif \
|
|
60basev2.ldif \
|
|
60basev3.ldif \
|
|
60ipadns.ldif \
|
|
60ipapk11.ldif \
|
|
60certificate-profiles.ldif \
|
|
61kerberos-ipav3.ldif \
|
|
65ipacertstore.ldif \
|
|
65ipasudo.ldif \
|
|
70ipaotp.ldif \
|
|
70topology.ldif \
|
|
71idviews.ldif \
|
|
72domainlevels.ldif \
|
|
73certmap.ldif \
|
|
anon-princ-aci.ldif \
|
|
bootstrap-template.ldif \
|
|
ca-topology.uldif \
|
|
custodia.conf.template \
|
|
default-aci.ldif \
|
|
default-hbac.ldif \
|
|
default-smb-group.ldif \
|
|
default-trust-view.ldif \
|
|
delegation.ldif \
|
|
replica-acis.ldif \
|
|
replica-prevent-time-skew.ldif \
|
|
ds-nfiles.ldif \
|
|
ds-ipa-env.conf.template \
|
|
dns.ldif \
|
|
dnssec.ldif \
|
|
domainlevel.ldif \
|
|
kerberos.ldif \
|
|
indices.ldif \
|
|
bind.ipa-ext.conf.template \
|
|
bind.ipa-options-ext.conf.template \
|
|
bind.named.conf.template \
|
|
certmap.conf.template \
|
|
kdc.conf.template \
|
|
kdc_extensions.template \
|
|
kdc_req.conf.template \
|
|
krb5.conf.template \
|
|
freeipa-server.template \
|
|
krb5.ini.template \
|
|
krb.con.template \
|
|
krbrealm.con.template \
|
|
smb.conf.template \
|
|
smb.conf.empty \
|
|
referint-conf.ldif \
|
|
dna.ldif \
|
|
master-entry.ldif \
|
|
memberof-task.ldif \
|
|
memberof-conf.ldif \
|
|
nis.uldif \
|
|
nis-update.uldif \
|
|
opendnssec_conf.template \
|
|
opendnssec_kasp.template \
|
|
unique-attributes.ldif \
|
|
wsgi.py \
|
|
repoint-managed-entries.ldif \
|
|
managed-entries.ldif \
|
|
topology-entries.ldif \
|
|
user_private_groups.ldif \
|
|
host_nis_groups.ldif \
|
|
uuid.ldif \
|
|
modrdn-krbprinc.ldif \
|
|
entryusn.ldif \
|
|
root-autobind.ldif \
|
|
pw-logging-conf.ldif \
|
|
sudobind.ldif \
|
|
automember.ldif \
|
|
replica-automember.ldif \
|
|
sasl-mapping-fallback.ldif \
|
|
schema-update.ldif \
|
|
vault.ldif \
|
|
kdcproxy-enable.uldif \
|
|
kdcproxy-disable.uldif \
|
|
ipa-httpd.conf.template \
|
|
ipa-httpd-wsgi.conf.template \
|
|
gssapi.login \
|
|
gssproxy.conf.template \
|
|
kdcproxy.wsgi \
|
|
ipakrb5.aug \
|
|
ipa.conf.template \
|
|
ipa-kdc-proxy.conf.template \
|
|
ipa-pki-proxy.conf.template \
|
|
ipa-rewrite.conf.template \
|
|
ipaca_default.ini \
|
|
ipaca_customize.ini \
|
|
ipaca_softhsm2.ini \
|
|
sshd_ipa.conf.template \
|
|
$(NULL)
|
|
|
|
kdcproxyconfdir = $(IPA_SYSCONF_DIR)/kdcproxy
|
|
dist_kdcproxyconf_DATA = \
|
|
kdcproxy.conf
|