From c1baae842529d89b7fda78ace5ffcff165a995ce Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Wed, 13 Oct 2021 17:54:12 -0400 Subject: [PATCH] On redhat-based platforms rely on authselect to enable sudo The default platform task enable_sssd_sudo() writes directly to nsswitch.conf to enable sudo. This isn't necessary to do on systems with authselect where we already pass in with-sudo as a profile option. Override the default function with does a direct write with a no-op. https://pagure.io/freeipa/issue/8755 Signed-off-by: Rob Crittenden Reviewed-By: Alexander Bokovoy --- ipaplatform/redhat/tasks.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ipaplatform/redhat/tasks.py b/ipaplatform/redhat/tasks.py index 4b0209f5d..2271cd20a 100644 --- a/ipaplatform/redhat/tasks.py +++ b/ipaplatform/redhat/tasks.py @@ -756,6 +756,9 @@ class RedHatTaskNamespace(BaseTaskNamespace): "{}.module".format(name)) for name, _module, _disabled in PKCS11_MODULES) + def enable_sssd_sudo(self, _fstore): + """sudo enablement is handled by authselect""" + def enable_ldap_automount(self, statestore): """ Point automount to ldap in nsswitch.conf.