5f7b84
commit eed1f6fcdb0526498223ebfe95f91ef5dec2172a
5f7b84
Author: Carlos O'Donell <carlos@redhat.com>
5f7b84
Date:   Tue Oct 29 11:58:03 2019 -0400
5f7b84
5f7b84
    Comment out initgroups from example nsswitch.conf (Bug 25146)
5f7b84
5f7b84
    In commit 4b7c74179c8928d971d370e1137d202f891a4cf5 the nsswitch.conf
5f7b84
    file was harmonized with downstream distributions, but this change
5f7b84
    included adding "initgroups: files". We should not add initgroups by
5f7b84
    default, we can have it, but it should be commented out to allow it
5f7b84
    to inherit the settings for group. The problem is principally that
5f7b84
    downstream authconfig won't update initgroups and it will get out of
5f7b84
    sync with the setting for group.
5f7b84
5f7b84
diff -Nrup a/nss/nsswitch.conf b/nss/nsswitch.conf
5f7b84
--- a/nss/nsswitch.conf	2019-10-29 14:13:15.883199544 -0400
5f7b84
+++ b/nss/nsswitch.conf	2019-10-29 14:15:44.860978858 -0400
5f7b84
@@ -64,7 +64,8 @@ automount:  files sss
5f7b84
 aliases:    files
5f7b84
 ethers:     files
5f7b84
 gshadow:    files
5f7b84
-initgroups: files
5f7b84
+# Allow initgroups to default to the setting for group.
5f7b84
+# initgroups: files
5f7b84
 networks:   files dns
5f7b84
 protocols:  files
5f7b84
 publickey:  files