From af60473e89bcf4897f62ff10b328ea4b584d65f9 Mon Sep 17 00:00:00 2001 From: Michel Decima Date: Tue, 19 Oct 2021 23:38:16 -0700 Subject: [PATCH] fix: do not use --force with pam-auth-update According to pam-auth-update(8), it is an error to use option --force in postinst script: This option must not be used by package maintainer scripts; it is intended for use by administrators only. --- debian/postinst | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/debian/postinst b/debian/postinst index bb9f3b3..0d27d14 100644 --- a/debian/postinst +++ b/debian/postinst @@ -34,19 +34,18 @@ case "$1" in # Configure PAM for credential cache apt-mark manual libpam-ccreds >/dev/null || true if [ -e /usr/share/pam-configs/ccreds-check ] ; then - pam-auth-update --force --package --enable \ - ccreds-check ccreds-save || true + pam-auth-update --package --enable ccreds-check ccreds-save || true fi # Configure PAM for Kerberos if [ -e /usr/share/pam-configs/sss ] ; then # Use pam-sss if present and disable pam-krb5 echo "Using pam-sss ..." - pam-auth-update --force --package --enable sss || true - pam-auth-update --force --package --remove krb5 || true + pam-auth-update --package --enable sss || true + pam-auth-update --package --remove krb5 || true elif [ -e /usr/share/pam-configs/krb5 ] ; then echo "Using pam-krb5 ..." - pam-auth-update --force --package --enable krb5 || true + pam-auth-update --package --enable krb5 || true else echo "Warning: no PAM config for Kerberos found!" fi