Blame SOURCES/authconfig-6.2.8-sssd-auth-for-local-users.patch

ee2f06
diff -Naur old/authconfig.spec.in new/authconfig.spec.in
ee2f06
--- old/authconfig.spec.in	2013-11-01 16:08:01.000000000 +0100
ee2f06
+++ new/authconfig.spec.in	2017-03-28 13:31:57.676934533 +0200
ee2f06
@@ -9,7 +9,7 @@
ee2f06
 Source: https://fedorahosted.org/releases/a/u/%{name}/%{name}-%{version}.tar.bz2
ee2f06
 Requires: newt-python, pam >= 0.99.10.0, python, libpwquality > 0.9
ee2f06
 Conflicts: pam_krb5 < 1.49, samba-common < 3.0, samba-client < 3.0
ee2f06
-Conflicts: nss_ldap < 254, sssd < 0.99.1
ee2f06
+Conflicts: nss_ldap < 254, sssd < 1.15.1
ee2f06
 Conflicts: freeipa-client < 2.2.0, ipa-client < 2.2.0
ee2f06
 BuildRequires: glib2-devel, python >= 2.6, python-devel
ee2f06
 BuildRequires: desktop-file-utils, intltool, gettext, perl-XML-Parser
ee2f06
diff -Naur old/authinfo.py new/authinfo.py
ee2f06
--- old/authinfo.py	2017-03-28 13:30:42.159279958 +0200
ee2f06
+++ new/authinfo.py	2017-03-28 13:34:02.955701552 +0200
ee2f06
@@ -3827,7 +3827,7 @@
ee2f06
 			# do not continue to following modules if authentication fails
ee2f06
 			if name == "unix" and stack == "auth" and (self.enableSSSDAuth or
ee2f06
 				self.implicitSSSDAuth or self.enableIPAv2) and (not self.enableNIS):
ee2f06
-				logic = LOGIC_FORCE_PKCS11 # make it or break it logic
ee2f06
+				logic = LOGIC_SUFFICIENT
ee2f06
 			# use oddjob_mkhomedir if available
ee2f06
 			if name == "mkhomedir" and os.access("%s/pam_%s.so"
ee2f06
 				% (AUTH_MODULE_DIR, "oddjob_mkhomedir"), os.X_OK):