[Freeipa-devel] [PATCH] Client install config file parsing/changing

Simo Sorce ssorce at redhat.com
Thu Sep 6 22:05:42 UTC 2007


This patch introduce a much better class to manipulate config files.
It has been tested with the ldap.conf and krb5.conf files and should
work
without any problem with smb.conf as well as other similar config files.

This patch also stop trying changing the ldap.conf and krb5.conf files
on client installs for now, as previously configured files existing on
the system may render the authentication/enumeration of users unusable
if strange directives where found. The original files are backuped. In
future we may switch back to changing config files, but before doing
that we need a lot more testing on what options are compatible and which
are not with our setup.

Right now running ipa-client-install on a client configures it correctly
(you just need to reboot the system or restart services to be able to
authenticate with pam_krb5).
The only gotcha is that until the fixed nss_ldap packages are available
adding the following line to /etc/ldap.conf is still needed:
host 1.2.3.4
     ^^^^^^^--IP address of the IPA server

Simo.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-151-conffiles.patch
Type: text/x-patch
Size: 26150 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20070906/34f25260/attachment.bin>


More information about the Freeipa-devel mailing list