Bug 1297034

Summary:	Let SSSD prompt non-local users for passwords
Product:	Red Hat Enterprise Linux 6	Reporter:	Sumit Bose <sbose>
Component:	authconfig	Assignee:	Tomas Mraz <tmraz>
Status:	CLOSED WONTFIX	QA Contact:	BaseOS QE Security Team <qe-baseos-security>
Severity:	unspecified	Docs Contact:	Aneta Šteflová Petrová <apetrova>
Priority:	unspecified
Version:	6.7	CC:	bressers, ksrot, mkosek, pkis, rpattath
Target Milestone:	rc	Keywords:	FutureFeature
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Enhancement
Doc Text:		Story Points:	---
Clone Of:
Clones:	1301072 (view as bug list)		Environment:
Last Closed:	2016-01-22 14:12:23 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1270027, 1301072

Description Sumit Bose 2016-01-08 19:29:06 UTC

Description of problem:

SSSD in 6.8 will have all the recent features like smart 2-factor authentication prompting and Smartcard PIN prompting.

To make those features visible to the user the changes from https://bugzilla.redhat.com/show_bug.cgi?id=1204864 are needed for 6.8 as well.

It would be nice if they changes can be backported to 6.8. If not the documentation has to be extended to explain how to do the changes manually.

Comment 8 Martin Kosek 2016-01-22 14:12:23 UTC

Based on the PM input and given that we are rather late in the RHEL-6 cycle, we have decided to close the request as WONTFIX. Users requiring Smart Card support in SSSD will need to manually change PAM configuration to enable it (or move to RHEL-7.2+).

I will open a doc bug, to note the required PAM changes in official docs.