On Thu, Feb 15, 2018 at 04:49:23PM +0200, Alexander Bokovoy via FreeIPA-devel wrote:
On Thu, 15 Feb 2018, Alexander Koksharov wrote:
> Hello,
>
> I would like to confirm whether we do want to completelly drop --no-sssd
> option.
> "no-sssd" configuration is not supported by authselect - there is not
such
> profile available.
> If we drop dependency on authconfig there will be a need to do code cleanup
> and also to rewrite related parts. And if we agreed on rewriting some parts
> there wont be any problems replacing multiple calls to authconfig with a
> single one to outhselect.
I think we should make sure authselect does support non-sssd profile.
authselect supports sssd and winbind. nss-pam-ldapd, pam_krb5 etc are
considered legacy and not supported. Nothing prevents you from creating
your own authselect profile for these, though, but authselect upstream
doesn't provide these.
What kind of non-sssd profile? What is the use-case for this?
Otherwise it is not a real replacement for authconfig in Fedora.
Again, what reason is there to use anything else than SSSD or winbind?