freeipa

#8054 ipa-client-install calls "authselect select sssd --force" at uninstall time before restoring user-nsswitch.conf
Closed: fixed by fcami. Opened by fcami.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Fedora): Bug 1746557

Description of problem:
ipa-client-install calls "authselect select sssd --force" at uninstall time
before restoring user-nsswitch.conf
user-nsswitch.conf still contains the sudoers line so nsswitch.conf is not
identical post-uninstall to previous state.
Version-Release number of selected component (if applicable):
freeipa-4.8.1-1.fc30
How reproducible:
Always
Steps to Reproduce:
0. grep sudoers /etc/nsswitch.conf => Nothing
1. ipa-client-install (...) -U
2. ipa-client-install --uninstall -U
3. grep sudoers /etc/nsswitch.conf
Actual results:
sudoers: files sss
Expected results:
Nothing
Additional info:
This is visible by setting a breakpoint:
* in ipaplatform/redhat/authconfig.py::RedHatAuthSelect::unconfigure()
* before ipautil.run(cmd)
Run ipa-client-install --uninstall
and when Pdb stops execution, examine the content of user-nsswitch.conf.

Metadata Update from @fcami:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1746557

Metadata Update from @fcami:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1746557, https://bugzilla.redhat.com/show_bug.cgi?id=1746557 (was: https://bugzilla.redhat.com/show_bug.cgi?id=1746557)

Metadata Update from @fcami:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1746557, https://bugzilla.redhat.com/show_bug.cgi?id=1746557, https://bugzilla.redhat.com/show_bug.cgi?id=1746558 (was: https://bugzilla.redhat.com/show_bug.cgi?id=1746557, https://bugzilla.redhat.com/show_bug.cgi?id=1746557)

Issue linked to Bugzilla: Bug 1746558

Metadata Update from @fcami:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1746557, https://bugzilla.redhat.com/show_bug.cgi?id=1746558 (was: https://bugzilla.redhat.com/show_bug.cgi?id=1746557, https://bugzilla.redhat.com/show_bug.cgi?id=1746557, https://bugzilla.redhat.com/show_bug.cgi?id=1746558)

Metadata Update from @fcami:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/3593

master:

  • 03a228aaf6418a93b2a59bef46a94c9bf7528077 ipatests: remove xfail in TestIpaClientAutomountFileRestore
  • 73f049c75f0b1ed269cb8ebcb5c2158d2bc8b614 authconfig.py: restore user-nsswitch.conf at uninstall time

ipa-4-8:

  • ffe9871e1f73a80ac092a5350bd80b78df52a9fd ipatests: remove xfail in TestIpaClientAutomountFileRestore
  • 7343504f976a726198b0c203702c87638d2b8636 authconfig.py: restore user-nsswitch.conf at uninstall time

Metadata Update from @fcami:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
https://github.com/freeipa/freeipa/pull/3593
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.