mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-25 08:21:05 -06:00
7729bb73b4
ipa-advise config-client-for-smart-card-auth is now using authselect instead of authconfig, but authselect enable-feature with-smartcard does not set pam_cert_auth=True in /etc/sssd/sssd.conf. As a result, smart card auth on a client fails. The fix adds a step in ipa-advise to configure pam_cert_auth=True. The fix also forces the use of python3 interpreter, and handles newer versions of SSSD which use OpenSSL instead of NSS (the trusted CA certs must be put into /etc/sssd/pki/sssd_auth_ca_db.pem Fixes https://pagure.io/freeipa/issue/7532 Reviewed-By: Rob Crittenden <rcritten@redhat.com> |
||
|---|---|---|
| .. | ||
| advise | ||
| dnssec | ||
| install | ||
| plugins | ||
| secrets | ||
| __init__.py | ||
| dcerpc_common.py | ||
| dcerpc.py | ||
| dns_data_management.py | ||
| Makefile.am | ||
| p11helper.py | ||
| rpcserver.py | ||
| servroles.py | ||
| setup.cfg | ||
| setup.py | ||
| topology.py | ||