On 05/13/2016 10:29 AM, Lukas Slebodnik wrote:
On (11/05/16 17:35), Lukas Slebodnik wrote:
On (10/05/16 17:06), Jakub Hrozek wrote:
On Tue, May 10, 2016 at 09:51:18AM -0400, Stephen Gallagher wrote:
On 05/10/2016 09:45 AM, Jakub Hrozek wrote:
<snip>
This basic sssd configuration expects that proxy provider will be installed by default. And that's not reality.
It's only installed with meta-package sssd. But It will not work with minimal installation of sssd. "yum install -y sssd-ldap" or even just "sssd-common"
If should start without failures and with default configuration then we should change pacakging as well and recommend similar packaging change to other downstreams (debian, opensuse ...)
Sorry it took me so long to reply on this. I should have examined this more closely. It was probably a bad idea to have the proxy provided be the default setup, since it might or might not be installed (and we probably don't want to force its inclusion). I guess it would make more sense for the native 'local' provider to be the default.
As for the AVC, I spotted that in my testing and I think I reported it to the selinux-policy package, but I'm not certain (I can't find it right now).