[Freeipa-devel] [PATCH] 774 configure nss properly with --no-sssd

[Martin Kosek]

On Thu, 2011-04-21 at 16:03 -0400, Rob Crittenden wrote:
> nss wasn't being configured properly with the --no-sssd argument. It is 
> supposed to fall back to nss_ldap. We needed the --enableforcelegacy option.
> 
> Also always back up sssd.conf, it gets updated regardless of whether it 
> is used in nss (by --enablekrb5).
> 
> rob

ACK. Pushed to master, ipa-2-0.

During the review I have found out ipa-client-install does not configure
correctly nss-pam-ldapd based client machine. I found a root cause of
this, I plan to fix it.

You can check the ticket I have opened for this issue:

https://fedorahosted.org/freeipa/ticket/1235

Martin