Description of problem: ipa-client-install calls "authselect select sssd --force" at uninstall time before restoring user-nsswitch.conf user-nsswitch.conf still contains the sudoers line so nsswitch.conf is not identical post-uninstall to previous state. Version-Release number of selected component (if applicable): freeipa-4.8.1-1.fc30 How reproducible: Always Steps to Reproduce: 0. grep sudoers /etc/nsswitch.conf => Nothing 1. ipa-client-install (...) -U 2. ipa-client-install --uninstall -U 3. grep sudoers /etc/nsswitch.conf Actual results: sudoers: files sss Expected results: Nothing Additional info: This is visible by setting a breakpoint: * in ipaplatform/redhat/authconfig.py::RedHatAuthSelect::unconfigure() * before ipautil.run(cmd) Run ipa-client-install --uninstall and when Pdb stops execution, examine the content of user-nsswitch.conf.
Upstream ticket: https://pagure.io/freeipa/issue/8054
PR: https://github.com/freeipa/freeipa/pull/3593
Fixed upstream master: https://pagure.io/freeipa/c/03a228aaf6418a93b2a59bef46a94c9bf7528077 https://pagure.io/freeipa/c/73f049c75f0b1ed269cb8ebcb5c2158d2bc8b614
Fixed upstream ipa-4-8: https://pagure.io/freeipa/c/ffe9871e1f73a80ac092a5350bd80b78df52a9fd https://pagure.io/freeipa/c/7343504f976a726198b0c203702c87638d2b8636
FEDORA-2019-75a963e4cb has been submitted as an update to Fedora 31. https://bodhi.fedoraproject.org/updates/FEDORA-2019-75a963e4cb
freeipa-4.8.2-1.fc31 has been pushed to the Fedora 31 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-75a963e4cb
freeipa-4.8.2-1.fc31 has been pushed to the Fedora 31 stable repository. If problems still persist, please make note of it in this bug report.