On (03/06/16 09:07), Stephen Gallagher wrote:
On 05/13/2016 10:29 AM, Lukas Slebodnik wrote:
> On (11/05/16 17:35), Lukas Slebodnik wrote:
>> On (10/05/16 17:06), Jakub Hrozek wrote:
>>> On Tue, May 10, 2016 at 09:51:18AM -0400, Stephen Gallagher wrote:
>>>> On 05/10/2016 09:45 AM, Jakub Hrozek wrote:
>> This basic sssd configuration expects that proxy provider will
>> be installed by default. And that's not reality.
>> It's only installed with meta-package sssd.
>> But It will not work with minimal installation of sssd.
>> "yum install -y sssd-ldap"
>> or even just "sssd-common"
>> If should start without failures and with default configuration
>> then we should change pacakging as well and recommend similar packaging change
>> to other downstreams (debian, opensuse ...)
Sorry it took me so long to reply on this. I should have examined this more
closely. It was probably a bad idea to have the proxy provided be the default
wasn't a bad idea per se.
I realized this issue later when I ran downstream tests and noticed AVCs.
setup, since it might or might not be installed (and we probably
don't want to
force its inclusion). I guess it would make more sense for the native 'local'
provider to be the default.
As for the AVC, I spotted that in my testing and I think I reported it
selinux-policy package, but I'm not certain (I can't find it right now).
If you cannot find BZ then let us know whether we should file a bug
or you will.