#9159 [RFE] ipa-client-install should provide option to enable subid: sss in /etc/nsswitch.conf
Closed: fixed 2 years ago by rcritten. Opened 2 years ago by frenaud.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 2068088

Description of problem:
ipa-client-install should provide an option allowing to configure subid managed at IPA level.
Currently, ipa-client-install configures the sssd profile which in turns customizes /etc/nsswitch.conf but the subid database does not use IPA and relies only on the local files /etc/subuid and /etc/subgid.

As it may not be relevant in all cases to configure "subid: sss", it would be nice to have a new option, and keep the default behavior without this option (=do not configure subuid: sss).

Version-Release number of selected component (if applicable):
subid feature was introduced in ipa-4.9.8

How reproducible:
Always

Steps to Reproduce:
1. install ipa client with ipa-client-install
2. grep subid /etc/nsswitch.conf

Actual results:
subid not configured to use sss

Expected results:
ipa-client-install should provide an option to configure NSS with subid: sss

Metadata Update from @frenaud:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=2068088

2 years ago

Metadata Update from @frenaud:
- Issue assigned to frenaud

2 years ago

Metadata Update from @frenaud:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/6266

2 years ago

master:

  • 571b6b8 Installer: add --subid option to select the sssd profile with-subid
  • 49ab92c man pages: document the --subid installer option
  • 952a77c ipatests: add new test with --subid installer option

ipa-4-9:

  • 74b2fd0 Installer: add --subid option to select the sssd profile with-subid
  • e10f338 man pages: document the --subid installer option
  • 0193498 ipatests: add new test with --subid installer option

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

2 years ago

Metadata Update from @frenaud:
- Custom field changelog adjusted to IPA installers now provide the ability to configure SSSD as datasource for subid

2 years ago

master:

  • e3e7c98 ipatests: ipa-client-install --subid adds entry in nsswitch.conf

ipa-4-9:

  • a576262 ipatests: ipa-client-install --subid adds entry in nsswitch.conf

ipa-4-10:

  • a39af6b ipatests: ipa-client-install --subid adds entry in nsswitch.conf

Login to comment on this ticket.

Metadata