tmzf5455/orange-yourdev-login
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: do not use --force with pam-auth-update

Browse Source 
According to pam-auth-update(8), it is an error to use option --force
in postinst script:

    This  option  must not be used by package maintainer scripts;
    it is intended for use by administrators only.
This commit is contained in:
Michel Decima
2021-10-19 23:38:16 -07:00
parent 1c53777cd2
commit af60473e89
1 changed files with 4 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
debian/postinst vendored
View File

@@ -34,19 +34,18 @@ case "$1" in
# Configure PAM for credential cache # Configure PAM for credential cache
apt-mark manual libpam-ccreds >/dev/null || true apt-mark manual libpam-ccreds >/dev/null || true
if [ -e /usr/share/pam-configs/ccreds-check ] ; then if [ -e /usr/share/pam-configs/ccreds-check ] ; then
pam-auth-update --force --package --enable \ pam-auth-update --package --enable ccreds-check ccreds-save || true
ccreds-check ccreds-save || true
fi fi
# Configure PAM for Kerberos # Configure PAM for Kerberos
if [ -e /usr/share/pam-configs/sss ] ; then if [ -e /usr/share/pam-configs/sss ] ; then
# Use pam-sss if present and disable pam-krb5 # Use pam-sss if present and disable pam-krb5
echo "Using pam-sss ..." echo "Using pam-sss ..."
pam-auth-update --force --package --enable sss || true pam-auth-update --package --enable sss || true
pam-auth-update --force --package --remove krb5 || true pam-auth-update --package --remove krb5 || true
elif [ -e /usr/share/pam-configs/krb5 ] ; then elif [ -e /usr/share/pam-configs/krb5 ] ; then
echo "Using pam-krb5 ..." echo "Using pam-krb5 ..."
pam-auth-update --force --package --enable krb5 || true pam-auth-update --package --enable krb5 || true
else else
echo "Warning: no PAM config for Kerberos found!" echo "Warning: no PAM config for Kerberos found!"
fi fi