URL:
https://github.com/freeipa/freeipa/pull/2359
Author: flo-renaud
Title: #2359: ipa-advise: configure pam_cert_auth=True for smart card on client
Action: opened
PR body:
"""
ipa-advise config-client-for-smart-card-auth is now using authselect
instead of authconfig, but authselect enable-feature with-smartcard
does not set pam_cert_auth=True in /etc/sssd/sssd.conf.
As a result, smart card auth on a client fails.
The fix adds a step in ipa-advise to configure pam_cert_auth=True.
The fix also forces the use of python3 interpreter.
Fixes
https://pagure.io/freeipa/issue/7532
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/2359/head:pr2359
git checkout pr2359