Project

General

Profile

Actions

Feature #12955

closed

formean-installer should set appropriate selinux booleans for IPA authentication

Added by Tommy McNeely about 8 years ago. Updated over 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

The formean-installer should set appropriate selinux booleans based on settings, for example, if IPA authentication is "enabled" it should set the following:

```
setsebool -P allow_httpd_mod_auth_pam on
setsebool -P httpd_dbus_sssd on
```

(via puppet modules of course)

This is already documented http://theforeman.org/manuals/1.10/index.html#5.7.3KerberosSingleSign-On ... but the installer should take care of it.

Actions #1

Updated by Ewoud Kohl van Wijngaarden over 6 years ago

  • Status changed from New to Resolved

This was fixed in 378d602424da89f4493767949d534b66942db8e2 and included in 2.1.3.

Actions

Also available in: Atom PDF