Bug 819683

Summary:	kerberos auth not configurable without ldap or nis/
Product:	[Fedora] Fedora	Reporter:	Ian Mortimer <i.mortimer>
Component:	authconfig	Assignee:	Tomas Mraz <tmraz>
Status:	CLOSED WONTFIX	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	low	Docs Contact:
Priority:	unspecified
Version:	17	CC:	tmraz
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-05-09 07:59:42 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ian Mortimer 2012-05-08 00:51:45 UTC

Description of problem:

Firstboot authentication screen doesn't allow configuring kerberos authentication unless ldap or nis is also selected for account details.

Version-Release number of selected component (if applicable):
17.2-1.fc17

How reproducible:
Always

Steps to Reproduce:
1. Install F17 beta
2. Reboot after install
3. Move through firstboot menus to account settings
  
Actual results:
Network authentication options are grayed out unless ldap or nis is selected for account details.

Expected results:
Kerberos authentication with local account details is a valid and useful configuration.


Additional info:
kerberos authentication with local account details can be configured via kickstart or after boot from the command line with authconfig and works fine in F17 beta.

Comment 1 Tomas Mraz 2012-05-09 07:59:42 UTC

You can configure it using the command-line ui. The GUI was simplified to accommodate only the major use-cases.

Comment 2 Ian Mortimer 2012-05-10 00:30:43 UTC

(In reply to comment #1)

> You can configure it using the command-line ui.

Yes and from kickstart which is how I do it myself but it's less friendly to first time users than the gui.
> The GUI was simplified to
> accommodate only the major use-cases.

I can understand that, however in this case most of the functionality is already there.  In the gui if you select ldap, configure kerberos and then unselect ldap the kerberos settings are grayed out again but kerberos is configured correctly.   The only thing missing is pam configuration.


Thanks
--
Ian