Attachment 586903 Details for Bug 825321 – Patch to configure ssh/sshd config files only when requested

[patch] Patch to configure ssh/sshd config files only when requested

0001-Do-not-enable-SSSD-ssh-feature-by-default.patch (text/plain), 6.52 KB, created by Martin Kosek on 2012-05-25 17:06:55 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Martin Kosek

Created: 2012-05-25 17:06:55 UTC

Size: 6.52 KB

patch

obsolete

>From 54653cf87e9585f2bf9ec5441808ec214b911fad Mon Sep 17 00:00:00 2001
>From: Martin Kosek <mkosek@redhat.com>
>Date: Fri, 25 May 2012 19:02:04 +0200
>Subject: [PATCH] Do not enable SSSD ssh feature by default
>
>We cannot enable SSSD ssh feature by default as it is still
>a Technical Preview. It must only be installed, when it is
>specifically requested by user.
>
>https://bugzilla.redhat.com/show_bug.cgi?id=825321
>---
> install/tools/ipa-replica-install         |   12 ++++++++----
> install/tools/ipa-server-install          |   12 ++++++++----
> ipa-client/ipa-install/ipa-client-install |    8 +++++---
> 3 files changed, 21 insertions(+), 11 deletions(-)
>
>diff --git a/install/tools/ipa-replica-install b/install/tools/ipa-replica-install
>index 7cfe7627e2d0b85d3584ab757c3ca5b78c51b801..8beeaa29c6765bbad301f10e19c0286604cdf106 100755
>--- a/install/tools/ipa-replica-install
>+++ b/install/tools/ipa-replica-install
>@@ -64,10 +64,12 @@ def parse_options():
>                       help="do not configure ntp", default=True)
>     basic_group.add_option("--no-ui-redirect", dest="ui_redirect", action="store_false",
>                       default=True, help="Do not automatically redirect to the Web UI")
>+    basic_group.add_option("--configure-ssh", dest="conf_ssh", default=False, action="store_true",
>+                      help="configure OpenSSH client to use SSH features provided by IPA server")
>     basic_group.add_option("--ssh-trust-dns", dest="trust_sshfp", default=False, action="store_true",
>                       help="configure OpenSSH client to trust DNS SSHFP records")
>-    basic_group.add_option("--no-sshd", dest="conf_sshd", default=True, action="store_false",
>-                      help="do not configure OpenSSH server")
>+    basic_group.add_option("--configure-sshd", dest="conf_sshd", default=False, action="store_true",
>+                      help="configure OpenSSH server to use SSH features provided by IPA server")
>     basic_group.add_option("--skip-conncheck", dest="skip_conncheck", action="store_true",
>                       default=False, help="skip connection check to remote master")
>     basic_group.add_option("-d", "--debug", dest="debug", action="store_true",
>@@ -488,8 +490,10 @@ def main():
>             args.append("--no-dns-sshfp")
>         if options.trust_sshfp:
>             args.append("--ssh-trust-dns")
>-        if not options.conf_sshd:
>-            args.append("--no-sshd")
>+        if options.conf_ssh:
>+            args.append("--configure-ssh")
>+        if options.conf_sshd:
>+            args.append("--configure-sshd")
>         ipautil.run(args)
>     except Exception, e:
>         print "Configuration of client side components failed!"
>diff --git a/install/tools/ipa-server-install b/install/tools/ipa-server-install
>index 2f06a9e879902eb1c2ac340757fcd1762959fe30..9ac5ceabde6372c55fc63b9be1be1438dc0fe322 100755
>--- a/install/tools/ipa-server-install
>+++ b/install/tools/ipa-server-install
>@@ -145,10 +145,12 @@ def parse_options():
>                       help="Don't install allow_all HBAC rule")
>     basic_group.add_option("--no-ui-redirect", dest="ui_redirect", action="store_false",
>                       default=True, help="Do not automatically redirect to the Web UI")
>+    basic_group.add_option("--configure-ssh", dest="conf_ssh", default=False, action="store_true",
>+                      help="configure OpenSSH client to use SSH features provided by IPA server")
>     basic_group.add_option("--ssh-trust-dns", dest="trust_sshfp", default=False, action="store_true",
>                       help="configure OpenSSH client to trust DNS SSHFP records")
>-    basic_group.add_option("--no-sshd", dest="conf_sshd", default=True, action="store_false",
>-                      help="do not configure OpenSSH server")
>+    basic_group.add_option("--configure-sshd", dest="conf_sshd", default=False, action="store_true",
>+                      help="configure OpenSSH server to use SSH features provided by IPA server")
>     basic_group.add_option("-d", "--debug", dest="debug", action="store_true",
>                       default=False, help="print debugging information")
>     basic_group.add_option("-U", "--unattended", dest="unattended", action="store_true",
>@@ -1053,8 +1055,10 @@ def main():
>             args.append("--no-dns-sshfp")
>         if options.trust_sshfp:
>             args.append("--ssh-trust-dns")
>-        if not options.conf_sshd:
>-            args.append("--no-sshd")
>+        if options.conf_ssh:
>+            args.append("--configure-ssh")
>+        if options.conf_sshd:
>+            args.append("--configure-sshd")
>         run(args)
>     except Exception, e:
>         sys.exit("Configuration of client side components failed!\nipa-client-install returned: " + str(e))
>diff --git a/ipa-client/ipa-install/ipa-client-install b/ipa-client/ipa-install/ipa-client-install
>index 6854581d205d628f9110f71283bffab476f7b115..17981009b728b3318965ab9e2c0220ddce47fdc4 100755
>--- a/ipa-client/ipa-install/ipa-client-install
>+++ b/ipa-client/ipa-install/ipa-client-install
>@@ -84,10 +84,12 @@ def parse_options():
>     basic_group.add_option("--ntp-server", dest="ntp_server", help="ntp server to use")
>     basic_group.add_option("-N", "--no-ntp", action="store_false",
>                       help="do not configure ntp", default=True, dest="conf_ntp")
>+    basic_group.add_option("--configure-ssh", dest="conf_ssh", default=False, action="store_true",
>+                      help="configure OpenSSH client to use SSH features provided by IPA server")
>     basic_group.add_option("--ssh-trust-dns", dest="trust_sshfp", default=False, action="store_true",
>                       help="configure OpenSSH client to trust DNS SSHFP records")
>-    basic_group.add_option("--no-sshd", dest="conf_sshd", default=True, action="store_false",
>-                      help="do not configure OpenSSH server")
>+    basic_group.add_option("--configure-sshd", dest="conf_sshd", default=False, action="store_true",
>+                      help="configure OpenSSH server to use SSH features provided by IPA server")
>     basic_group.add_option("--no-dns-sshfp", dest="create_sshfp", default=True, action="store_false",
>                       help="do not automatically create DNS SSHFP records")
>     basic_group.add_option("--noac", dest="no_ac", default=False, action="store_true",
>@@ -854,7 +856,7 @@ def configure_ssh(fstore, ssh_dir, options):
>     ssh_config = os.path.join(ssh_dir, 'ssh_config')
>     sshd_config = os.path.join(ssh_dir, 'sshd_config')
> 
>-    if file_exists(ssh_config):
>+    if options.conf_ssh and file_exists(ssh_config):
>         fstore.backup_file(ssh_config)
> 
>         changes = {}
>-- 
>1.7.7.6
>

Actions: View | Diff

Attachments on bug 825321: 586903 | 586912