Red Hat Bugzilla – Bug 692144
Uninstalling ipa-client doesn't restore sssd.conf, if previously installed with --no-sssd option
Last modified: 2015-01-04 18:47:39 EST
Description of problem:
When installing IPA Client using --no-sssd option, logs do not indicate sssd.conf was backed up (like there are debug line outputs when other files are backed up)
Next when uninstalling this client, the sssd.conf is not restored correctly.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1.Install using command:
ipa-client-install -p admin -w Secret123 --no-sssd -d
3. /etc/sssd/sssd.conf is not restored to the contents it had before install.
Actual results: sssd.conf still has the section
auth_provider = krb5
krb5_realm = TESTRELM
id_provider = ldap
ldap_id_use_start_tls = False
chpass_provider = krb5
cache_credentials = True
ldap_tls_cacertdir = /etc/openldap/cacerts
Be restored back to original sssd.conf
Verified using ipa-client-2.1.2-2.el6.x86_64
sssd.conf is restored
Technical note added. If any revisions are required, please edit the "Technical Notes" field
accordingly. All revisions will be proofread by the Engineering Content Services team.
Cause: Using the --no-sssd option of ipa-client-install did not properly back up and restore existing sssd.conf.
Consequence: nsswitch.conf was not properly configured for use without sssd and the existing sssd.conf was lost.
Fix: Pass --enableforcelegacy to authconfig and always back up sssd.conf.
Result: Using the --no-sssd option works as expected and sssd.conf is properly restored during uninstallation.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.