freeipa/ipaclient
Christian Heimes 8b0f3595fd Allow ipaapi user to access SSSD's info pipe
For smart card authentication, ipaapi must be able to access to sss-ifp.
During installation and upgrade, the ipaapi user is now added to
[ifp]allowed_uids.

The commit also fixes two related issues:

* The server upgrade code now enables ifp service in sssd.conf. The
  existing code modified sssd.conf but never wrote the changes to disk.
* sssd_enable_service() no longer fails after it has detected an
  unrecognized service.

Fixes: https://pagure.io/freeipa/issue/7751
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2018-11-07 16:28:35 +01:00
..
csrgen csrgen: Change to pure openssl config format (no script) 2017-04-03 07:46:30 +00:00
install Allow ipaapi user to access SSSD's info pipe 2018-11-07 16:28:35 +01:00
plugins Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
remote_plugins Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
__init__.py Split ipa-client/ into ipaclient/ (Python library) and client/ (C, scripts) 2016-01-27 12:09:02 +01:00
__main__.py Use entry_points for ipa CLI 2017-04-11 13:29:50 +02:00
csrgen_ffi.py Cleanup shebang and executable bit 2018-07-05 19:46:42 +02:00
csrgen.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
frontend.py frontent: Add summary class property to CommandOverride 2016-08-17 14:16:04 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Cleanup shebang and executable bit 2018-07-05 19:46:42 +02:00