On Tue, Oct 12, 2021, at 11:32 AM, Ben Cotton wrote:
> https://fedoraproject.org/wiki/Changes/Make_Authselect_Mandatory
Just to raise the visibility here, this currently breaks all ostree-based
systems (*again*):
https://bugzilla.redhat.com/show_bug.cgi?id=2019052#c1
__
On 10/14/21 14:57, Michael Catanzaro wrote:
Enforce Authselect Configuration Consistency
This sounds good, I updated the page title. Thank you.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.f
On Thu, Oct 14 2021 at 01:28:23 PM +0200, Pavel Březina
wrote:
Do you have any proposals on the name?
To me, this change means that if you don't use authselect, you are
basically on your own and I'd like to stress this as much as possible.
Enforce Authselect Configuration Consistency?
_
On 10/12/21 7:12 PM, Michael Catanzaro wrote:
This change is well-considered and includes detailed reasoning to
support it. Looks good to me.
I think the change proposal should be renamed, though, since authselect
would clearly not *actually* be mandatory. Of course you'll risk severe
break
On 10/12/21 5:45 PM, Neal Gompa wrote:
On Tue, Oct 12, 2021 at 11:33 AM Ben Cotton wrote:
=== 1. It is difficult to deliver updates to configurations ===
FIles /etc/nsswitch.conf and /etc/pam.d/* are distributed as
%config(noreplace) which means that they are configuration files and
are only i
On Wed, Oct 13 2021 at 10:22:14 AM +0200, Hans de Goede
wrote:
Making what IMHO is a poor default of always using sssd everywhere
hardcoded even deeper into Fedora seems like a bad idea to me.
I think we can fix this at the same time. Make authselect default to
its minimal profile rather than
Hi,
On 10/12/21 5:32 PM, Ben Cotton wrote:
> https://fedoraproject.org/wiki/Changes/Make_Authselect_Mandatory
>
> == Summary ==
> This change wants to make authselect required to configure
> authentication and identity sources and forcefully update
> non-authselect configuration to the sssd auths
Dne 12. 10. 21 v 17:45 Neal Gompa napsal(a):
On Tue, Oct 12, 2021 at 11:33 AM Ben Cotton wrote:
=== 1. It is difficult to deliver updates to configurations ===
FIles /etc/nsswitch.conf and /etc/pam.d/* are distributed as
%config(noreplace) which means that they are configuration files and
are
On Tue, Oct 12 2021 at 01:44:12 PM -0400, Neal Gompa
wrote:
Why hasn't the nsswitch.conf situation been fixed to work in
/usr/share like it does in /etc?
Guess: probably nobody proposed it to the glibc developers yet.
Michael
___
devel mailing list
On Tue, Oct 12, 2021 at 1:13 PM Michael Catanzaro wrote:
>
>
> This change is well-considered and includes detailed reasoning to
> support it. Looks good to me.
>
> I think the change proposal should be renamed, though, since authselect
> would clearly not *actually* be mandatory. Of course you'll
This change is well-considered and includes detailed reasoning to
support it. Looks good to me.
I think the change proposal should be renamed, though, since authselect
would clearly not *actually* be mandatory. Of course you'll risk severe
breakage if you turn it off and edit these low-level
On Tue, Oct 12, 2021 at 11:33 AM Ben Cotton wrote:
>
> === 1. It is difficult to deliver updates to configurations ===
> FIles /etc/nsswitch.conf and /etc/pam.d/* are distributed as
> %config(noreplace) which means that they are configuration files and
> are only installed if they are not yet pres
12 matches
Mail list logo
