On 12/6/18 12:20 PM, Pavel Březina wrote:
Hello,
systemd and nss-mdns packages modifies nsswitch.conf in their %post
scriptlets which creates conflicts with authselect on systems that are
configured by authselect. This needs to be solved somehow.
Originally, I wanted to create an authselect command that can be used by
packages on systems that are configured by authselect and on systems
that are configured with different ways [1]. But it turned out that
there are only two packages that touches nsswitch.conf so I do not think
this is necessary.
I prepared initial design document with multiple solutions that came to
my mind [2] and I would like to discuss this with the community to see
what is the correct and desired way to solve this.
Thank you,
Pavel.
[1]
https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx/message/4YMQOZCV32272UIGZM45NVJLVZY2UOZH/
[2]
https://fedoraproject.org/wiki/User:Pbrezina/Authselect_and_packages_that_modifies_nsswitch
Reading the whole discussion here, I think it would be best for the
moment to make systemd and nss-mdns scriptlets compatible also with
authselect configuration and let systemd maintainers to get their
modules in glibc if/when possible. Once it is in glibc default
nsswitch.conf it will get picked up by authselect.
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx