chore: mark some PAM profiles as seen in d/postinst
Mark PAM profiles krb5, sss and yourdev as "seen" in /var/lib/pam so next execution of command /usr/sbin/pam-auth-update in interactive mode will ignore the values of 'Default' properties. This avoids the automatic selection of the sss profile, which conflicts with the yourdev profile.
This commit is contained in:
4
debian/postinst
vendored
4
debian/postinst
vendored
@@ -35,6 +35,10 @@ case "$1" in
|
||||
pam-auth-update --package \
|
||||
--remove sss krb5 \
|
||||
--enable yourdev ccreds-check ccreds-save || true
|
||||
for profile in sss krb5 yourdev ; do
|
||||
grep -qw "$profile" /var/lib/pam/seen \
|
||||
|| echo "$profile" >> /var/lib/pam/seen || true
|
||||
done
|
||||
|
||||
# Fix sssd configuration permissions
|
||||
chmod 600 /etc/sssd/sssd.conf || true
|
||||
|
||||
Reference in New Issue
Block a user