Merge branch '12-pam-auth-update' into develop

Closes #12
This commit is contained in:
Michel Decima
2025-02-05 10:34:16 +01:00

16
debian/postinst vendored
View File

@@ -11,8 +11,8 @@ case "$1" in
fi fi
# Configure NSS for pam-pkcs11 and pam-sss # Configure NSS for pam-pkcs11 and pam-sss
mkdir -p /etc/pki/nssdb mkdir -p /etc/pki/nssdb
orange-certupdate /etc/pki/nssdb >/dev/null || true orange-certupdate /etc/pki/nssdb >/dev/null || true
orange-dongle-aladdin --force update /etc/pki/nssdb || true orange-dongle-aladdin --force update /etc/pki/nssdb || true
# Configure certificates for SSSD (OpenSSL) # Configure certificates for SSSD (OpenSSL)
@@ -33,11 +33,13 @@ case "$1" in
# a config file in dir /usr/share/pam-configs. # a config file in dir /usr/share/pam-configs.
fi fi
# Configure PAM # Configure PAM
pam-auth-update --package \ # Force non-interactive mode to avoid useless debconf message
--remove sss krb5 \ # about conflict between sss and yourdev profiles (see #12)
--enable yourdev ccreds-check ccreds-save || true DEBIAN_FRONTEND=noninteractive pam-auth-update --package \
for profile in sss krb5 yourdev ; do --remove sss krb5 \
--enable yourdev ccreds-check ccreds-save || true
for profile in sss krb5 yourdev ; do
grep -qw "$profile" /var/lib/pam/seen \ grep -qw "$profile" /var/lib/pam/seen \
|| echo "$profile" >> /var/lib/pam/seen || true || echo "$profile" >> /var/lib/pam/seen || true
done done