freeipa

#8038 ipa-client-automount --uninstall is not restoring nsswitch.conf
Closed: fixed by fcami. Opened by fcami.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 8): Bug 1740167

Description of problem:
ipa-client-automount --uninstall is not restoring  nsswitch.conf
Version-Release number of selected component (if applicable):
ipa-client-4.8.0-6.module+el8.1.0+3869+84a20141.x86_64
Steps to Reproduce:
1: Install ipa-server and ipa-client
2: setup ipa-client-automount with --no-sssd
3: run ipa-client-automount --uninstall
Actual results:
# cat /etc/nsswitch.conf  | grep automount
automount: files ldap
Expected results:
# cat /etc/nsswitch.conf  | grep automount
automount:  sss files
Or it should restore properly

Metadata Update from @fcami:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1740167

Metadata Update from @fcami:
- Custom field on_review adjusted to https://github.com/freeipa/freeipa/pull/3529

@rcritten explained the behavior was changed in https://pagure.io/freeipa/c/a0e846f56c8de3b549d1d284087131da13135e34?branch=master

to attend to the following scenario:
set automount to files in /etc/nssswitch.conf
ipa-client-install
grep automount /etc/nsswitch.conf (should be sss files)
ipa-client-automount --no-sssd
grep automount /etc/nsswitch.conf (should be files ldap)
ipa-client-automount --uninstall -U
grep automount /etc/nsswitch.conf will be files, the original state

Hi @fcami , this is what I faced in another issue:
https://pagure.io/freeipa/issue/7820

and corresponding PR:
https://github.com/freeipa/freeipa/pull/2716

I've merged it into my distro, but unfortunately, forgot about an upstream patch.
Edited by slev

It's a similar problem but on the RHEL/Fedora side where authselect is in use things are different. authselect doesn't like other programs writing directly to /etc/nsswitch.conf so IPA needs to be changed to use authselect calls to change the nss databases.

After much smashing of my /etc/nsswitch.conf authselect refused to operate on the file at all because it was out-of-sync with what it thought it should be.

Metadata Update from @rcritten:
- Custom field blocking adjusted to 8042

master:

  • 405dcc6becfca504dce7e06c6f0849a9c06df4c6 ipatests: check that ipa-client-automount restores nsswitch.conf at uninstall time
  • b27ad6e9f956a2485eee09b647b45c4901a1f928 ipa-client-automount: always restore nsswitch.conf at uninstall time
  • e5af8c19a9e40fb3b96c56ace081f79980437fc2 Move ipachangeconf from ipaclient.install to ipapython
  • 41ef8fba31ddbb32e2e5b7cccdc9b582a0809111 Use tasks to configure automount nsswitch settings

ipa-4-8:

  • abea98a9b918c0771ad10b314238b32c570f0372 ipatests: check that ipa-client-automount restores nsswitch.conf at uninstall time
  • 2f0afeda6e66fcca5c184a4036112fcd315f2f6e ipa-client-automount: always restore nsswitch.conf at uninstall time
  • 6e92776bfc199e9ca92e11ef3315dcecad3c9307 Move ipachangeconf from ipaclient.install to ipapython
  • 2da90887632c764a73866c9ad3824ebb53c0aa73 Use tasks to configure automount nsswitch settings

Metadata Update from @fcami:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
8042
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.