[Freeipa-users] ipa-client-install: please look for SELINUX=disabled
Harald Dunkel
harri at afaics.de
Sat May 13 04:52:56 UTC 2017
Hi folks,
RHEL 7.3, sssd 1.14.0:
If /etc/selinux/config says "SELINUX=disabled", then pam seems to fail
(without telling why) and users cannot login. *Extremely* painful.
Do you think ipa-client-install could add
selinux_provider = none
to the generated sssd.conf file, if selinux is disabled?
Another option might be to check at runtime.
Thanx in advance
Harri
More information about the Freeipa-users
mailing list