[Bug 779010] New: pam_krb5 package is installed altough SSSD is in use
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c0 Summary: pam_krb5 package is installed altough SSSD is in use Classification: openSUSE Product: openSUSE 12.2 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: AutoYaST AssignedTo: ug@suse.com ReportedBy: joschibrauchle@gmx.de QAContact: qa-bugs@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.1 (KHTML, like Gecko) Chrome/21.0.1180.89 Safari/537.1 When SSSD is in use, the "pam_krb5" package should not be installed. Still, this is happening during the post-package phase in stage2 of an AutoYast installation. My "profile.xml" includes this: ------- <kerberos> <kerberos_client> ...stripped... </kerberos_client> <pam_login> <sssd config:type="boolean">true</sssd> <!-- Use SSSD now instead of pam_krb5 --> <use_kerberos config:type="boolean">false</use_kerberos> </pam_login> </kerberos> ------- Still, pam_krb5 gets installed. Looking at the source of "Kerberos.ycp", it looks like the Import and Export functions are not matching each other. The Export functions mentions the "<pam_login><sssd ...>true</sssd></pam_login>" settings like this: ------- map export_map = $[ "pam_login": $[ "use_kerberos" : use_pam_krb, "sssd" : sssd, ], ... ------- while the Import function uses ------- use_pam_krb = settings["pam_login", "use_kerberos"]:false; ...stripped... sssd = settings["sssd"]:sssd; ------- which does not seem to match "<pam_login><sssd ...>true</sssd></pam_login>". Reproducible: Always Steps to Reproduce: 1. Configure Kerberos client (for legacy software), but use SSSD for PAM 2. Create XML profile and perform AutoYast installation Actual Results: Package "pam_krb5" gets installed during post software installation in stage 2 of AutoYast installation. Expected Results: Package "pam_krb5" should not be installed in favor of SSSD. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c Joschi Brauchle <joschibrauchle@gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|ug@suse.com |jsuchome@suse.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c1 Jiří Suchomel <jsuchome@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED --- Comment #1 from Jiří Suchomel <jsuchome@suse.com> 2012-09-07 08:04:17 UTC --- (In reply to comment #0)
Looking at the source of "Kerberos.ycp" ... .... which does not seem to match "<pam_login><sssd ...>true</sssd></pam_login>".
Good catch! I'll prepare package for testing. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c2 Jiří Suchomel <jsuchome@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |joschibrauchle@gmx.de --- Comment #2 from Jiří Suchomel <jsuchome@suse.com> 2012-09-07 08:33:51 UTC --- https://build.opensuse.org/package/binaries?package=yast2-kerberos-client&project=home%3Ajsuchome&repository=openSUSE_12.2 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c3 --- Comment #3 from Joschi Brauchle <joschibrauchle@gmx.de> 2012-09-07 12:13:22 UTC --- After doing a test AutoYast installation with the package from above, "pam_krb5" no longer gets installed along with SSSD. Thanks! -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c4 --- Comment #4 from Bernhard Wiedemann <bwiedemann@suse.com> 2012-09-11 12:00:20 CEST --- This is an autogenerated message for OBS integration: This bug (779010) was mentioned in https://build.opensuse.org/request/show/133609 Factory / yast2-kerberos-client -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c6 Jiří Suchomel <jsuchome@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |maintenance@opensuse.org --- Comment #6 from Jiří Suchomel <jsuchome@suse.com> 2012-09-13 10:16:51 UTC --- yast2-ldap-client and yast2-kerberos-client packages need to be updated for 12.2 too. Can I proceed? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c Swamp Workflow Management <swamp@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard| |maint:running:49177:low -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c9 Benjamin Brunner <bbrunner@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEEDINFO |ASSIGNED InfoProvider|maintenance@opensuse.org | --- Comment #9 from Benjamin Brunner <bbrunner@suse.com> 2012-09-13 16:29:07 CEST --- Jiří could you create a maintenancerequest with the updated packages please. We'll start an update. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c10 Jiří Suchomel <jsuchome@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #10 from Jiří Suchomel <jsuchome@suse.com> 2012-09-17 06:09:49 UTC ---
osc rq show 134560 Request: #134560
maintenance_incident: home:jsuchome:12.2/yast2-kerberos-client -> openSUSE:Maintenance (release in openSUSE:12.2:Update) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c12 --- Comment #12 from Swamp Workflow Management <swamp@suse.de> 2012-09-26 15:11:28 UTC --- openSUSE-RU-2012:1257-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 779010 CVE References: Sources used: openSUSE 12.2 (src): yast2-kerberos-client-2.22.3-2.4.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c13 Swamp Workflow Management <swamp@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:49177:low |maint:running:49177:low | |maint:released:sle11-sp2:49 | |241 --- Comment #13 from Swamp Workflow Management <swamp@suse.de> 2012-10-04 11:03:33 UTC --- Update released for: yast2-kerberos-client, yast2-ldap-client Products: SLE-DESKTOP 11-SP2 (i386, x86_64) SLE-SERVER 11-SP2 (i386, ia64, ppc64, s390x, x86_64) SLES4VMWARE 11-SP2 (i386, x86_64) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=779010 https://bugzilla.novell.com/show_bug.cgi?id=779010#c Swamp Workflow Management <swamp@suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status Whiteboard|maint:running:49177:low |. |maint:released:sle11-sp2:49 | |241 | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com