Blame SOURCES/authconfig-6.2.8-sssd-auth-for-local-users.patch

7a7bf9
diff -Naur old/authconfig.spec.in new/authconfig.spec.in
7a7bf9
--- old/authconfig.spec.in	2013-11-01 16:08:01.000000000 +0100
7a7bf9
+++ new/authconfig.spec.in	2017-03-28 13:31:57.676934533 +0200
7a7bf9
@@ -9,7 +9,7 @@
7a7bf9
 Source: https://fedorahosted.org/releases/a/u/%{name}/%{name}-%{version}.tar.bz2
7a7bf9
 Requires: newt-python, pam >= 0.99.10.0, python, libpwquality > 0.9
7a7bf9
 Conflicts: pam_krb5 < 1.49, samba-common < 3.0, samba-client < 3.0
7a7bf9
-Conflicts: nss_ldap < 254, sssd < 0.99.1
7a7bf9
+Conflicts: nss_ldap < 254, sssd < 1.15.1
7a7bf9
 Conflicts: freeipa-client < 2.2.0, ipa-client < 2.2.0
7a7bf9
 BuildRequires: glib2-devel, python >= 2.6, python-devel
7a7bf9
 BuildRequires: desktop-file-utils, intltool, gettext, perl-XML-Parser
7a7bf9
diff -Naur old/authinfo.py new/authinfo.py
7a7bf9
--- old/authinfo.py	2017-03-28 13:30:42.159279958 +0200
7a7bf9
+++ new/authinfo.py	2017-03-28 13:34:02.955701552 +0200
7a7bf9
@@ -3827,7 +3827,7 @@
7a7bf9
 			# do not continue to following modules if authentication fails
7a7bf9
 			if name == "unix" and stack == "auth" and (self.enableSSSDAuth or
7a7bf9
 				self.implicitSSSDAuth or self.enableIPAv2) and (not self.enableNIS):
7a7bf9
-				logic = LOGIC_FORCE_PKCS11 # make it or break it logic
7a7bf9
+				logic = LOGIC_SUFFICIENT
7a7bf9
 			# use oddjob_mkhomedir if available
7a7bf9
 			if name == "mkhomedir" and os.access("%s/pam_%s.so"
7a7bf9
 				% (AUTH_MODULE_DIR, "oddjob_mkhomedir"), os.X_OK):