16
debian/postinst
vendored
16
debian/postinst
vendored
@@ -11,8 +11,8 @@ case "$1" in
|
||||
fi
|
||||
|
||||
# Configure NSS for pam-pkcs11 and pam-sss
|
||||
mkdir -p /etc/pki/nssdb
|
||||
orange-certupdate /etc/pki/nssdb >/dev/null || true
|
||||
mkdir -p /etc/pki/nssdb
|
||||
orange-certupdate /etc/pki/nssdb >/dev/null || true
|
||||
orange-dongle-aladdin --force update /etc/pki/nssdb || true
|
||||
|
||||
# Configure certificates for SSSD (OpenSSL)
|
||||
@@ -33,11 +33,13 @@ case "$1" in
|
||||
# a config file in dir /usr/share/pam-configs.
|
||||
fi
|
||||
|
||||
# Configure PAM
|
||||
pam-auth-update --package \
|
||||
--remove sss krb5 \
|
||||
--enable yourdev ccreds-check ccreds-save || true
|
||||
for profile in sss krb5 yourdev ; do
|
||||
# Configure PAM
|
||||
# Force non-interactive mode to avoid useless debconf message
|
||||
# about conflict between sss and yourdev profiles (see #12)
|
||||
DEBIAN_FRONTEND=noninteractive pam-auth-update --package \
|
||||
--remove sss krb5 \
|
||||
--enable yourdev ccreds-check ccreds-save || true
|
||||
for profile in sss krb5 yourdev ; do
|
||||
grep -qw "$profile" /var/lib/pam/seen \
|
||||
|| echo "$profile" >> /var/lib/pam/seen || true
|
||||
done
|
||||
|
||||
Reference in New Issue
Block a user