http://bugzilla.opensuse.org/show_bug.cgi?id=1062124 Bug ID: 1062124 Summary: sssd-ipa missing sssd-ad requirement in Factory Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: varkoly@suse.com Reporter: neyers@geod.uni-bonn.de QA Contact: opensuse-communityscreening@forge.provo.novell.com CC: hguo@suse.com Found By: --- Blocker: --- Currently, the Factory package for sssd-ipa does not specify the requirement of sssd-ad. Due to missing the sssd_pac binary, starting the sssd service fails with

[sssd] [service_startup_handler] (0x0010): Could not exec /usr/lib/sssd/sssd_pac --uid 0 --gid 0 --debug-to-files, reason: No such file or directory

According to the man page of sssd-ipa:

The IPA provider will use the PAC responder if the Kerberos tickets of users from trusted realms contain a PAC. To make configuration easier the PAC responder is started automatically if the IPA ID provider is configured.

This issue was apparently (I'm not authorized to access) reported in https://bugzilla.opensuse.org/show_bug.cgi?id=1021441 and then fixed for Leap in revision 10 of sssd: https://build.opensuse.org/package/rdiff/openSUSE:Leap:42.3/sssd?linkrev=base&rev=10

From sssd.changes:

Tue Feb 7 09:46:59 UTC 2017 - hguo@suse.com

- The IPA provider depends on AD provider's PAC executable, hence introducing the package dependency. (bsc#1021441)

-- You are receiving this mail because: You are on the CC list for the bug.