Request for enhancement

As an administrator , I want use ipa-client-install so that a Suse distribution host will authenticate against an freeipa server .

Issue

ipa-client-install does not work correctly on Suse distribution systems. There are several issue that need to be addressed:

• On Suse, the /var/lib/sss/pubconf/krb5.include.d does not exist by default. This will prevent kerberos to initialize during the install as the include statement for this directory is automatically added to /etc/krb5.conf if it is missing.

• Suse does not use authconfig or authselect to manage pam.d Suse uses a tool called 'pam-config'. Ipa-client-install does not properly configure pam using a the Suse native tool

• Suse does not provide domainname.service. Ipa-client-install generates an error and failed to complete when trying to restart this non-existent service.

• Ipa-client-install does not update/manage the nsswitch.conf file like on other distrobutions

Steps to Reproduce

1. Install freeipa-client from suse's security:idm
2. execute ipa-client-install

Actual behavior

ipa-client-install unexpectedly fails when initializing kerberos.

Expected behavior

ipa-client-install configures the system to authenticate using a freeipa server

Version/Release/Distribution

openSUSE 15.3 through Tumbleweed