#7377 Investigate and define plan of authconfig replacement in FreeIPA
Closed: fixed Opened by akokshar.

Investigate if current state of authselect in Fedora supports all usecases FreeIPA uses
Create a design page with definition how FreeIPA use authconfig and how it will use authselect.

Report/start discussion about usecases which are not yet supported by authselect (possibly depraced ipa-client-install --no-sssd) to decide their fate.


This is related to:

  • Fedora 28: https://fedoraproject.org/wiki/Changes/AuthselectAsDefault
  • Fedora 27: https://fedoraproject.org/wiki/Changes/Authselect

Metadata Update from @rcritten:
- Issue set to the milestone: FreeIPA 4.7

Metadata Update from @pvoborni:
- Issue priority set to: critical

master:

  • 1df1786b06485139918e412b2e20164a0726d387 Migration from authconfig to authselect
  • c36bd38360dd833ed657666d52e243e66b3c0dd5 New tests for authselect migration
  • e442464509049240bdb05a8bae09ce1291ca6b86 Revert commit d705320ec136abc2fcf524f2b63a76d3fc0ba97a
  • 8fe5f8d2e73c5ada6f9f8149d1410c7e26acacf5 ipa-advise: adapt config-client-for-smart-card-auth to authselect

master:

  • 63a5feb19f60e46d3ba22ea2d3231eff88002f2a authselect test: skip test if authselect is not available
  • aa64ef03a04b6e2509924a9f968724232123be3a authselect migration: use stable interface to query current config

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata