Bug 1746558

Summary:	ipa-client-install calls "authselect select sssd --force" at uninstall time before restoring user-nsswitch.conf
Product:	Red Hat Enterprise Linux 8	Reporter:	François Cami <fcami>
Component:	ipa	Assignee:	Thomas Woerner <twoerner>
Status:	CLOSED ERRATA	QA Contact:	ipa-qe <ipa-qe>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	8.1	CC:	abokovoy, amore, contribs, extras-qa, ipa-maint, jcholast, jhrozek, ksiddiqu, pasik, pcech, pvoborni, rcritten, ssorce, tscherf, twoerner
Target Milestone:	rc
Target Release:	8.2
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	1746557	Environment:
Last Closed:	2020-04-28 15:43:29 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1746557
Bug Blocks:

Description François Cami 2019-08-28 18:35:08 UTC

+++ This bug was initially created as a clone of Bug #1746557 +++

Description of problem:
ipa-client-install calls "authselect select sssd --force" at uninstall time before restoring user-nsswitch.conf
user-nsswitch.conf still contains the sudoers line so nsswitch.conf is not identical post-uninstall to previous state.


Version-Release number of selected component (if applicable):
freeipa-4.8.1-1.fc30

How reproducible:
Always


Steps to Reproduce:
0. grep sudoers /etc/nsswitch.conf => Nothing
1. ipa-client-install (...) -U
2. ipa-client-install --uninstall -U
3. grep sudoers /etc/nsswitch.conf

Actual results:
sudoers: files sss

Expected results:
Nothing

Additional info:
This is visible by setting a breakpoint:
* in ipaplatform/redhat/authconfig.py::RedHatAuthSelect::unconfigure()
* before ipautil.run(cmd)
Run ipa-client-install --uninstall
and when Pdb stops execution, examine the content of user-nsswitch.conf.

Comment 1 François Cami 2019-08-28 18:39:46 UTC

Upstream ticket:
https://pagure.io/freeipa/issue/8054

Comment 2 François Cami 2019-08-29 14:02:02 UTC

PR: https://github.com/freeipa/freeipa/pull/3593
nfs test results: http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/56dfa73c-ca5d-11e9-94f2-fa163e643683/
nfs_nsswitch_restore test results: http://freeipa-org-pr-ci.s3-website.eu-central-1.amazonaws.com/jobs/692a3092-ca5d-11e9-a12e-fa163edb55d0/
All related automated tests are green.

Comment 3 François Cami 2019-08-29 15:37:32 UTC

Fixed upstream
master:
https://pagure.io/freeipa/c/03a228aaf6418a93b2a59bef46a94c9bf7528077
https://pagure.io/freeipa/c/73f049c75f0b1ed269cb8ebcb5c2158d2bc8b614

Comment 4 François Cami 2019-08-29 21:02:42 UTC

Fixed upstream
ipa-4-8:
https://pagure.io/freeipa/c/ffe9871e1f73a80ac092a5350bd80b78df52a9fd
https://pagure.io/freeipa/c/7343504f976a726198b0c203702c87638d2b8636

Comment 9 errata-xmlrpc 2020-04-28 15:43:29 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2020:1640