Red Hat Bugzilla – Bug 1392540
glibc: default nsswitch.conf does not list sss for the automount service
Last modified: 2018-05-23 12:28:31 EDT
Description of problem: Newly provisioned RHEL 7.3 systems in IPA environment do not have functioning autofs due to the 'sss' option not being added to the automount entry of nsswitch.conf. Version-Release number of selected component (if applicable): ipa-client-4.4.0-12.el7.x86_64 How reproducible: always Steps to Reproduce: 1. ipa-client-automount Actual results: automount: files Expected results: automount: files sss Additional info:
ipa-client-automount doesn't configure nsswitch with sssd, this should happen earlier in ipa-client-install This is RHEL 7.3 with IPA 4.4 in lab: # cat /etc/nsswitch.conf | grep automount automount: files nisplus # cat /var/log/ipaclient-install.log | grep authconfig 2016-07-11T14:55:35Z DEBUG args=/usr/sbin/authconfig --enablesssdauth --update --enablesssd 2016-07-11T14:55:37Z DEBUG args=/usr/sbin/authconfig --update --nisdomain test1.abc.idm.lab.eng.brq.redhat.com And this Fedora F24 with FreeIPA master (almost the same as 4.4): # cat /etc/nsswitch.conf | grep automount automount: files sss # cat /var/log/ipaclient-install.log | grep authconfig 2016-10-27T12:45:34Z DEBUG args=/usr/sbin/authconfig --enablesssdauth --update --enablesssd 2016-10-27T12:45:35Z DEBUG args=/usr/sbin/authconfig --update --nisdomain test2.example.test Both were IPA servers installed with the same options. The fact that it is not pure client but IPA server should not matter given that both runs ipa-client-install. Question is why the automount parts of nsswitch.conf differ? But, as written elsewhere, running following commands on RHEL machine fixes the issue: # authconfig --disablesssd --update # authconfig --enablesssd --update # cat /etc/nsswitch.conf | grep automount automount: files sss Tomas, any ideas why it happens? I can provide installed machine if needed.
The authconfig currently does not modify nsswitch.conf if it sss is present on the passwd: line. I think this should be solved in the default nsswitch.conf in glibc. As it contains sss already for other databases, it should contain it for automount as well.
The workaround for already installed machines is to run 'authconfig --updateall'.
Should we move /etc/nsswitch.conf to its own package so that we can change it with less QE effort? Any other changes we should fold into the same change?
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2017:1916