From a45125f78db5d95b3d0dd000cf6af0ef4444f9a0 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose@redhat.com>
Date: Dec 03 2012 20:34:23 +0000
Subject: Restart sssd after authconfig update


Recent versions of authconfig do not restart sssd if only the
--enablesssd and --enablesssdauth options are used. To make sure sssd is
running after ipa-server-install is run this patch add an unconditional
restart of sssd after authconfig is run during the installation.

Since there already is some logic trying to determine if sssd needs to
be restarted or stopped if freeipa in uninstalled no changes are needed
here.

Fixes https://fedorahosted.org/freeipa/ticket/3267

---

diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install
index 190efb1..612bdc6 100755
--- a/ipa-client/ipa-install/ipa-client-install
+++ b/ipa-client/ipa-install/ipa-client-install
@@ -1822,6 +1822,12 @@ def install(options, env, fstore, statestore):
         auth_config.add_option("update")
         auth_config.execute()
         root_logger.info("%s", message)
+        if options.sssd:
+            sssd = ipaservices.service('sssd')
+            try:
+                sssd.restart()
+            except CalledProcessError:
+                root_logger.warning("SSSD service restart was unsuccessful.")
 
         if not options.sssd:
             #Modify pam to add pam_krb5 only when sssd is not in use