freeipa/ipaplatform
Florence Blanc-Renaud 3cf9979aec ipa-client-install: use sshd drop-in configuration
sshd 8.2+ now supports the "Include" keyword in sshd_config and
ships by default /etc/ssh/sshd_config with
"Include /etc/ssh/sshd_config.d/*"

As fedora 32 provides a config file in that directory (05-redhat.conf) with
ChallengeResponseAuthentication no
that is conflicting with IPA client config, ipa-client-install now needs
to make its config changes in a drop-in file read before 05-redhat.conf
(the files are read in lexicographic order and the first setting wins).

There is no need to handle upgrades from sshd < 8.2: if openssh-server
detects a customisation in /etc/ssh/sshd_config, it will not update
the file but create /etc/ssh/sshd_config.rpmnew and ask the admin
to manually handle the config upgrade.

Fixes: https://pagure.io/freeipa/issue/8304
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
2020-06-23 11:11:46 +02:00
..
base ipa-client-install: use sshd drop-in configuration 2020-06-23 11:11:46 +02:00
debian Overhaul bind upgrade process 2020-06-10 16:07:07 +02:00
fedora Enable TLS 1.3 support on the server 2019-12-02 16:48:07 +01:00
redhat Debian: write out only one CA certificate per file 2020-04-08 14:17:31 +03:00
rhel Use nis-domainname.service on all RH platforms 2019-07-04 10:43:51 +02:00
suse Overhaul bind upgrade process 2020-06-10 16:07:07 +02:00
__init__.py Make ipaplatform a regular top-level package 2020-05-05 11:47:16 +02:00
_importhook.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
constants.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
Makefile.am Use namespace-aware meta importer for ipaplatform 2017-11-15 14:17:24 +01:00
osinfo.py Add pytest.skip_if_container() 2020-05-06 09:14:29 +02:00
override.py.in Use namespace-aware meta importer for ipaplatform 2017-11-15 14:17:24 +01:00
paths.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
services.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Make ipaplatform a regular top-level package 2020-05-05 11:47:16 +02:00
tasks.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00