diff --git a/linux_os/guide/services/sssd/sssd_enable_smartcards/ansible/shared.yml b/linux_os/guide/services/sssd/sssd_enable_smartcards/ansible/shared.yml index 6cc6586fd1a6..02ed38f7b519 100644 --- a/linux_os/guide/services/sssd/sssd_enable_smartcards/ansible/shared.yml +++ b/linux_os/guide/services/sssd/sssd_enable_smartcards/ansible/shared.yml @@ -30,7 +30,7 @@ dest: /etc/sssd/sssd.conf section: pam option: pam_cert_auth - value: 'true' + value: 'True' create: yes mode: 0600 diff --git a/linux_os/guide/services/sssd/sssd_enable_smartcards/bash/shared.sh b/linux_os/guide/services/sssd/sssd_enable_smartcards/bash/shared.sh index 3e6574ec63b8..200db257f562 100644 --- a/linux_os/guide/services/sssd/sssd_enable_smartcards/bash/shared.sh +++ b/linux_os/guide/services/sssd/sssd_enable_smartcards/bash/shared.sh @@ -4,7 +4,7 @@ # complexity = low # disruption = medium -{{{ bash_ensure_ini_config("/etc/sssd/sssd.conf", "pam", "pam_cert_auth", "true") }}} +{{{ bash_ensure_ini_config("/etc/sssd/sssd.conf", "pam", "pam_cert_auth", "True") }}} {{% if product in ["ol8", "rhel8"] %}} if [ -f /usr/bin/authselect ]; then diff --git a/linux_os/guide/services/sssd/sssd_enable_smartcards/rule.yml b/linux_os/guide/services/sssd/sssd_enable_smartcards/rule.yml index db20aba51e4d..65aade53a283 100644 --- a/linux_os/guide/services/sssd/sssd_enable_smartcards/rule.yml +++ b/linux_os/guide/services/sssd/sssd_enable_smartcards/rule.yml @@ -7,10 +7,10 @@ title: 'Enable Smartcards in SSSD' description: |- SSSD should be configured to authenticate access to the system using smart cards. To enable smart cards in SSSD, set pam_cert_auth - to true under the [pam] + to True under the [pam] section in /etc/sssd/sssd.conf. For example:
[pam]
- pam_cert_auth = true
+ pam_cert_auth = True
{{% if product in ["ol8", "rhel8"] %}}
Add or update "pam_sss.so" with "try_cert_auth" or "require_cert_auth" in the
@@ -58,7 +58,7 @@ ocil: |-
To verify that smart cards are enabled in SSSD, run the following command:
$ sudo grep pam_cert_auth /etc/sssd/sssd.confIf configured properly, output should be -
pam_cert_auth = true+
pam_cert_auth = True{{% if product in ["ol8", "rhel8"] %}}
$ sudo grep cert_auth /etc/sssd/sssd.conf /etc/pam.d/*@@ -68,7 +68,7 @@ ocil: |- fixtext: |- Edit the file "/etc/sssd/sssd.conf" and add or edit the following line: - pam_cert_auth = true + pam_cert_auth = True {{% if product in ["ol8", "rhel8"] %}} Add or update "pam_sss.so" with "try_cert_auth" or "require_cert_auth" in the