DevHeads.net

authselect: what to do with systemd and nss-mdns that modify nsswith.conf

Hello,

systemd and nss-mdns packages modifies nsswitch.conf in their %post
scriptlets which creates conflicts with authselect on systems that are
configured by authselect. This needs to be solved somehow.

Originally, I wanted to create an authselect command that can be used by
packages on systems that are configured by authselect and on systems
that are configured with different ways [1]. But it turned out that
there are only two packages that touches nsswitch.conf so I do not think
this is necessary.

I prepared initial design document with multiple solutions that came to
my mind [2] and I would like to discuss this with the community to see
what is the correct and desired way to solve this.

Thank you,
Pavel.

[1]
<a href="https://lists.fedoraproject.org/archives/list/ ... at lists dot fedoraproject.org/message/4YMQOZCV32272UIGZM45NVJLVZY2UOZH/" title="https://lists.fedoraproject.org/archives/list/ ... at lists dot fedoraproject.org/message/4YMQOZCV32272UIGZM45NVJLVZY2UOZH/">https://lists.fedoraproject.org/archives/list/ ... at lists dot fedoraproject....</a>

[2]
<a href="https://fedoraproject.org/wiki/User:Pbrezina/Authselect_and_packages_that_modifies_nsswitch" title="https://fedoraproject.org/wiki/User:Pbrezina/Authselect_and_packages_that_modifies_nsswitch">https://fedoraproject.org/wiki/User:Pbrezina/Authselect_and_packages_tha...</a>

Comments

Re: authselect: what to do with systemd and nss-mdns that modify

By Florian Weimer at 12/06/2018 - 07:31

* Pavel Březina:

Other packagers (notably sssd) have made the required changes by
requesting them form glibc developers.

Would this help to solve the problem here?

Thanks,
Florian