On (06/01/16 18:21), Lukas Slebodnik wrote:
ehlo,
attached patch should fix warnings with ad provider
and without installed package sssd-ipa
[sssd[be[domain.com]]] [sss_write_domain_mappings] (0x0200): Mapping file for domain
[
domain.com] is [/var/lib/sss/pubconf/krb5.include.d/domain_realm_domain.com]
[sssd[be[domain.com]]] [sss_write_domain_mappings] (0x0040): creating the temp file
[/var/lib/sss/pubconf/krb5.include.d/domain_realm_domain.comkd2iik] for domain-realm
mappings failed
[sssd[be[domain.com]]] [sss_write_domain_mappings] (0x0080): Could not remove file
[/var/lib/sss/pubconf/krb5.include.d/domain_realm_domain.comkd2iik]: [2]: Aucun fichier ou
dossier de ce type
LS
From 446c1c82b79310ae1f6494d4b219316d6ed8ec01 Mon Sep 17 00:00:00
2001
From: Lukas Slebodnik <lslebodn(a)redhat.com>
Date: Wed, 6 Jan 2016 18:09:16 +0100
Subject: [PATCH] SPEC: Change package ownership of
%{pubconfpath}/krb5.include.d
krb5 domain mapping files are stored to the directory
%{pubconfpath}/krb5.include.d. It can be stored by ipa or ad provider.
However this directory was owned by sub-package sssd-ipa. And ad provider
can be installed without this package. Therefore %{pubconfpath}/krb5.include.d
should be owned by common dependency.
---
contrib/sssd.spec.in | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/contrib/sssd.spec.in b/contrib/sssd.spec.in
index 710ba92209d4a4d6e45b63bf7bf693fd5ec5f490..5f6880a1d30454f365ea6c596299a13b6b3121fe
100644
--- a/contrib/sssd.spec.in
+++ b/contrib/sssd.spec.in
@@ -733,6 +733,7 @@ rm -rf $RPM_BUILD_ROOT
%ghost %attr(0644,sssd,sssd) %verify(not md5 size mtime) %{mcpath}/initgroups
%attr(755,sssd,sssd) %dir %{pipepath}
%attr(755,sssd,sssd) %dir %{pubconfpath}
+%attr(755,root,root) %dir %{pubconfpath}/krb5.include.d
I only moved this line from
one package to another.
But I wonder why the directory is owned by root.
sssd will not be able to write domain mappings in non-root mode.
%attr(755,sssd,sssd) %dir %{gpocachepath}
%attr(700,sssd,sssd) %dir %{pipepath}/private
%attr(750,sssd,sssd) %dir %{_var}/log/%{name}
@@ -782,7 +783,6 @@ rm -rf $RPM_BUILD_ROOT
%files ipa -f sssd_ipa.lang
%defattr(-,root,root,-)
%doc COPYING
-%attr(755,root,root) %dir %{pubconfpath}/krb5.include.d
%attr(700,sssd,sssd) %dir %{keytabdir}
%{_libdir}/%{name}/libsss_ipa.so
%attr(4750,root,sssd) %{_libexecdir}/%{servicename}/selinux_child
--
2.5.0
LS