On 05/13/2016 10:29 AM, Lukas Slebodnik wrote:
On (11/05/16 17:35), Lukas Slebodnik wrote:
> On (10/05/16 17:06), Jakub Hrozek wrote:
>> On Tue, May 10, 2016 at 09:51:18AM -0400, Stephen Gallagher wrote:
>>> On 05/10/2016 09:45 AM, Jakub Hrozek wrote:
<snip>
> This basic sssd configuration expects that proxy provider will
> be installed by default. And that's not reality.
>
> It's only installed with meta-package sssd.
> But It will not work with minimal installation of sssd.
> "yum install -y sssd-ldap"
> or even just "sssd-common"
>
> If should start without failures and with default configuration
> then we should change pacakging as well and recommend similar packaging change
> to other downstreams (debian, opensuse ...)
Sorry it took me so long to reply on this. I should have examined this more
closely. It was probably a bad idea to have the proxy provided be the default
setup, since it might or might not be installed (and we probably don't want to
force its inclusion). I guess it would make more sense for the native 'local'
provider to be the default.
As for the AVC, I spotted that in my testing and I think I reported it to the
selinux-policy package, but I'm not certain (I can't find it right now).