Project

General

Profile

Feature #12955

formean-installer should set appropriate selinux booleans for IPA authentication

Added by Tommy McNeely over 3 years ago. Updated almost 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
Team Backlog:
Fixed in Releases:
Found in Releases:

Description

The formean-installer should set appropriate selinux booleans based on settings, for example, if IPA authentication is "enabled" it should set the following:

```
setsebool -P allow_httpd_mod_auth_pam on
setsebool -P httpd_dbus_sssd on
```

(via puppet modules of course)

This is already documented http://theforeman.org/manuals/1.10/index.html#5.7.3KerberosSingleSign-On ... but the installer should take care of it.

History

#1 Updated by Ewoud Kohl van Wijngaarden almost 2 years ago

  • Status changed from New to Resolved

This was fixed in 378d602424da89f4493767949d534b66942db8e2 and included in 2.1.3.

Also available in: Atom PDF