Bug 874809

Summary:	authconfig does not add autofs to services
Product:	[Fedora] Fedora	Reporter:	Orion Poplawski <orion>
Component:	authconfig	Assignee:	Tomas Mraz <tmraz>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	18	CC:	tmraz
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	authconfig-6.2.5-1.fc18.2	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-03-26 20:38:51 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Orion Poplawski 2012-11-08 21:03:55 UTC

Description of problem:

F18 install with:

authconfig --enablemd5 --enableshadow --enableldap --ldapserver=ldap.cora.nwra.com,ldap2.cora.nwra.com --ldapbasedn=dc=nwra,dc=com --enableldaptls --ldaploadcacert=http://www.cora.nwra.com/cgi-bin/getca.pl --enablekrb5 --krb5kdc=kerberos.cora.nwra.com,kerberos2.cora.nwra.com --krb5adminserver=kerberos.cora.nwra.com --krb5realm=CORA.NWRA.COM

It configures sss for automount in nsswitch.conf and adds an [autofs] section to sssd.conf, but does not add "autofs" to the list of services:

[sssd]
services = nss, pam

Version-Release number of selected component (if applicable):
authconfig-6.2.4-2.fc18.x86_64

Comment 1 Orion Poplawski 2012-11-08 21:17:15 UTC

I'm not sure this is appropriate for authconfig, but we will need to configure sssd.conf to set:

ldap_autofs_search_base = dc=cora,dc=nwra,dc=com

in the [domain/default] section as well.  It would be convenient to be able to set that with authconfig like we set the overall ldap_search_base with --ldapbasedn.

Comment 2 Tomas Mraz 2012-12-05 16:01:58 UTC

Is it a common requirement to set the ldap_autofs_search_base differently from the ldap_search_base? And does SSSD default to use the ldap_search_base if ldap_autofs_search_base is not set?

Comment 3 Orion Poplawski 2012-12-05 16:11:50 UTC

I really can't speak to how common it is.  In our company's case we have multiple locations sharing common user area in "dc=nwra,dc=com", but each office has it's own automount maps for the local network configuration.

My understanding is that it defaults to ldap_search_base if ldap_autofs_search_base is not set.

Comment 4 Tomas Mraz 2013-03-26 20:38:51 UTC

Fixed, however we don't set the ldap_autofs_search_base for now.