Documentation: SSSD server guide recommends pam_mkhomedir.so, latest aptitude patch to sssd removes it

[AW01545]

This documentation:

 https://help.ubuntu.com/lts/serverguide/sssd-ad.html.en

Suggests adding:

 session required pam_mkhomedir.so skel=/etc/skel/ umask=0022

To:

 /etc/pam.d/common-session

But latest aptitude patch to sssd recommends overriding the change and moves it to:

 /etc/pam.d/common-session.pam-old

Need a place to source in local session directives that will not be overwritten by aptitude patches.

[Timo Aaltonen (tjaalton)]

this has nothing to do with sssd itself

besides, the server guide could just show how to use pam-auth-update which is able to configure pam_mkhomedir these days

[AW01545 (ricknickle)]

I wouldn't even be reporting it if apt packages weren't overwriting my configuration.

Is there any local file that SSSD won't overwrite for example a new file 'common-session-local'?

Thanks,

Rick

[Timo Aaltonen (tjaalton)]

if your goal is to enable pam_mkhomedir on the system, you could run:

pam-auth-update --package --enable mkhomedir

and then it would stay enabled even after system upgrades

[AW01545 (ricknickle)]

Thank you, Timo, that seems to work fine. It appears that the whitespace that pam-auth-update --package --enable mkhomedir adds to the entry is significant. In my insertion, my whitespace was not aligned to the same column so although the pam_mkhomedir.so was identical in the printing characters, it didn't match.

I will update the documentation bug accordingly, I believe the documentation should reflect your recommendation.

Thanks again,

Rick

-- <email address hidden>

________________________________
From: <email address hidden> <email address hidden> on behalf of Timo Aaltonen <email address hidden>
Sent: Friday, March 22, 2019 3:05 AM
To: <email address hidden>
Subject: [Bug 1821085] Re: Documentation: SSSD server guide recommends pam_mkhomedir.so, latest aptitude patch to sssd removes it

if your goal is to enable pam_mkhomedir on the system, you could run:

pam-auth-update --package --enable mkhomedir

and then it would stay enabled even after system upgrades

--
You received this bug notification because you are subscribed to the bug
report.
https://bugs.launchpad.net/bugs/1821085

Title:
  Documentation: SSSD server guide recommends pam_mkhomedir.so, latest
  aptitude patch to sssd removes it

Status in Ubuntu Server Guide:
  New
Status in sssd package in Ubuntu:
  Invalid

Bug description:
  This documentation:

   https://help.ubuntu.com/lts/serverguide/sssd-ad.html.en

  Suggests adding:

   session required pam_mkhomedir.so skel=/etc/skel/ umask=0022

  To:

   /etc/pam.d/common-session

  But latest aptitude patch to sssd recommends overriding the change and
  moves it to:

   /etc/pam.d/common-session.pam-old

  Need a place to source in local session directives that will not be
  overwritten by aptitude patches.

To manage notifications about this bug go to:
https://bugs.launchpad.net/serverguide/+bug/1821085/+subscriptions

[AW01545 (ricknickle)]

Timo's recommendation appears to pass a test of patching SSD. The difference between patching it yourself and using pam-auth-update for me was that whitespace was significant.

I think the Server guide should reflect pam-auth-update rather than manually adding pam_mkhomedir.so.

if your goal is to enable pam_mkhomedir on the system, you could run:

pam-auth-update --package --enable mkhomedir

and then it would stay enabled even after system upgrades

[Andreas Hasenack (ahasenack)]

The sssd chapter in the server guide has been rewritten and the pam-auth-update command was incorporated.

[Andreas Hasenack (ahasenack)]

Sorry, forgot the url: https://discourse.ubuntu.com/t/service-sssd/11579