freeipa/ipaclient/install
Christian Heimes 8b0f3595fd Allow ipaapi user to access SSSD's info pipe
For smart card authentication, ipaapi must be able to access to sss-ifp.
During installation and upgrade, the ipaapi user is now added to
[ifp]allowed_uids.

The commit also fixes two related issues:

* The server upgrade code now enables ifp service in sssd.conf. The
  existing code modified sssd.conf but never wrote the changes to disk.
* sssd_enable_service() no longer fails after it has detected an
  unrecognized service.

Fixes: https://pagure.io/freeipa/issue/7751
Signed-off-by: Christian Heimes <cheimes@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
2018-11-07 16:28:35 +01:00
..
__init__.py ipa-client-install: move client install to module 2016-11-11 12:13:56 +01:00
automount.py install: re-introduce option groups 2017-03-13 10:12:40 +01:00
client.py Allow ipaapi user to access SSSD's info pipe 2018-11-07 16:28:35 +01:00
ipa_certupdate.py Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
ipa_client_install.py Improve console logging for ipa-server-install 2018-06-20 08:38:03 +02:00
ipachangeconf.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
ipadiscovery.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
sssd.py ipaclient: Remove --no-sssd and --no-ac options 2018-08-13 12:23:53 +02:00
timeconf.py Add absolute_import future imports 2018-04-20 09:43:37 +02:00