URL:
https://github.com/freeipa/freeipa/pull/2527
Author: tiran
Title: #2527: [Backport][ipa-4-7] Allow ipaapi user to access SSSD's info pipe
Action: opened
PR body:
"""
Manual backport of PR #2515
For smart card authentication, ipaapi must be able to access to sss-ifp.
During installation and upgrade, the ipaapi user is now added to
[ifp]allowed_uids.
The commit also fixes two related issues:
* The server upgrade code now enables ifp service in sssd.conf. The
existing code modified sssd.conf but never wrote the changes to disk.
* sssd_enable_service() no longer fails after it has detected an
unrecognized service.
Fixes:
https://pagure.io/freeipa/issue/7751
Signed-off-by: Christian Heimes <cheimes(a)redhat.com>
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2527/head:pr2527
git checkout pr2527