The ipa-client-install assumes that there will be an IPA provider when it configures sssd.conf. However the ipa provider is available only in SSSD 1.5.x. IPA client install should either be smart enough to detect the situation and not configure SSSD with IPA back end but rather ldap+kerberos as it did in the past or require 1.5.x which is probably preferable.
We generate sssd.conf using a configuration provided by the sssd team almost exactly a year ago.
Steve tells me that the ipa provider dates back to sssd 1.0.0.
He did suggest setting the minimum version to 1.5.1.
Replying to [comment:2 rcritten]:
This is probably true if Stephen says so but it is fully functional only in 1.5.x.
So this is what we should do - ack.
attachment freeipa-rcrit-709-sssd.patch
master: f34c0ab
Metadata Update from @dpal: - Issue assigned to rcritten - Issue set to the milestone: FreeIPA 2.0.1 RC (bug fixing)
Login to comment on this ticket.