Merge branch '12-pam-auth-update' into develop

Closes #12
This commit is contained in:
Michel Decima
2025-02-05 10:34:16 +01:00

16
debian/postinst vendored
View File

@@ -11,8 +11,8 @@ case "$1" in
fi
# Configure NSS for pam-pkcs11 and pam-sss
mkdir -p /etc/pki/nssdb
orange-certupdate /etc/pki/nssdb >/dev/null || true
mkdir -p /etc/pki/nssdb
orange-certupdate /etc/pki/nssdb >/dev/null || true
orange-dongle-aladdin --force update /etc/pki/nssdb || true
# Configure certificates for SSSD (OpenSSL)
@@ -33,11 +33,13 @@ case "$1" in
# a config file in dir /usr/share/pam-configs.
fi
# Configure PAM
pam-auth-update --package \
--remove sss krb5 \
--enable yourdev ccreds-check ccreds-save || true
for profile in sss krb5 yourdev ; do
# Configure PAM
# Force non-interactive mode to avoid useless debconf message
# about conflict between sss and yourdev profiles (see #12)
DEBIAN_FRONTEND=noninteractive pam-auth-update --package \
--remove sss krb5 \
--enable yourdev ccreds-check ccreds-save || true
for profile in sss krb5 yourdev ; do
grep -qw "$profile" /var/lib/pam/seen \
|| echo "$profile" >> /var/lib/pam/seen || true
done