https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c0 Summary: pam_krb5 package is installed altough SSSD is in use Classification: openSUSE Product: openSUSE 12.2 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: AutoYaST AssignedTo: ug@suse.com ReportedBy: joschibrauchle@gmx.de QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.89 Safari/537.1 When SSSD is in use, the "pam_krb5" package should not be installed. Still, this is happening during the post-package phase in stage2 of an AutoYast installation. My "profile.xml" includes this: ------- <kerberos> <kerberos_client> ...stripped... </kerberos_client> <pam_login> <sssd config:type="boolean">true</sssd> <!-- Use SSSD now instead of pam_krb5 --> <use_kerberos config:type="boolean">false</use_kerberos> </pam_login> </kerberos> ------- Still, pam_krb5 gets installed. Looking at the source of "Kerberos.ycp", it looks like the Import and Export functions are not matching each other. The Export functions mentions the "<pam_login><sssd ...>true</sssd></pam_login>" settings like this: ------- map export_map = $[ "pam_login": $[ "use_kerberos" : use_pam_krb, "sssd" : sssd, ], ... ------- while the Import function uses ------- use_pam_krb = settings["pam_login", "use_kerberos"]:false; ...stripped... sssd = settings["sssd"]:sssd; ------- which does not seem to match "<pam_login><sssd ...>true</sssd></pam_login>". Reproducible: Always Steps to Reproduce: 1. Configure Kerberos client (for legacy software), but use SSSD for PAM 2. Create XML profile and perform AutoYast installation Actual Results: Package "pam_krb5" gets installed during post software installation in stage 2 of AutoYast installation. Expected Results: Package "pam_krb5" should not be installed in favor of SSSD. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.