From 7c675b7a4048e0d85c7bb90a242020e480f0db5f Mon Sep 17 00:00:00 2001 From: Hunter Jones Date: Sat, 11 Jun 2022 15:49:57 -0500 Subject: [PATCH] Fix sssd_enable_smartcards case sensitivity --- .../sssd/sssd_enable_smartcards/ansible/shared.yml | 2 +- .../services/sssd/sssd_enable_smartcards/bash/shared.sh | 2 +- .../guide/services/sssd/sssd_enable_smartcards/rule.yml | 8 ++++---- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/linux_os/guide/services/sssd/sssd_enable_smartcards/ansible/shared.yml b/linux_os/guide/services/sssd/sssd_enable_smartcards/ansible/shared.yml index 6cc6586fd1a6..02ed38f7b519 100644 --- a/linux_os/guide/services/sssd/sssd_enable_smartcards/ansible/shared.yml +++ b/linux_os/guide/services/sssd/sssd_enable_smartcards/ansible/shared.yml @@ -30,7 +30,7 @@ dest: /etc/sssd/sssd.conf section: pam option: pam_cert_auth - value: 'true' + value: 'True' create: yes mode: 0600 diff --git a/linux_os/guide/services/sssd/sssd_enable_smartcards/bash/shared.sh b/linux_os/guide/services/sssd/sssd_enable_smartcards/bash/shared.sh index 3e6574ec63b8..200db257f562 100644 --- a/linux_os/guide/services/sssd/sssd_enable_smartcards/bash/shared.sh +++ b/linux_os/guide/services/sssd/sssd_enable_smartcards/bash/shared.sh @@ -4,7 +4,7 @@ # complexity = low # disruption = medium -{{{ bash_ensure_ini_config("/etc/sssd/sssd.conf", "pam", "pam_cert_auth", "true") }}} +{{{ bash_ensure_ini_config("/etc/sssd/sssd.conf", "pam", "pam_cert_auth", "True") }}} {{% if product in ["ol8", "rhel8"] %}} if [ -f /usr/bin/authselect ]; then diff --git a/linux_os/guide/services/sssd/sssd_enable_smartcards/rule.yml b/linux_os/guide/services/sssd/sssd_enable_smartcards/rule.yml index db20aba51e4d..65aade53a283 100644 --- a/linux_os/guide/services/sssd/sssd_enable_smartcards/rule.yml +++ b/linux_os/guide/services/sssd/sssd_enable_smartcards/rule.yml @@ -7,10 +7,10 @@ title: 'Enable Smartcards in SSSD' description: |- SSSD should be configured to authenticate access to the system using smart cards. To enable smart cards in SSSD, set pam_cert_auth - to true under the [pam] + to True under the [pam] section in /etc/sssd/sssd.conf. For example:
[pam]
-    pam_cert_auth = true
+    pam_cert_auth = True
     
{{% if product in ["ol8", "rhel8"] %}} Add or update "pam_sss.so" with "try_cert_auth" or "require_cert_auth" in the @@ -58,7 +58,7 @@ ocil: |- To verify that smart cards are enabled in SSSD, run the following command:
$ sudo grep pam_cert_auth /etc/sssd/sssd.conf
If configured properly, output should be -
pam_cert_auth = true
+
pam_cert_auth = True
{{% if product in ["ol8", "rhel8"] %}}
$ sudo grep cert_auth /etc/sssd/sssd.conf /etc/pam.d/*
@@ -68,7 +68,7 @@ ocil: |- fixtext: |- Edit the file "/etc/sssd/sssd.conf" and add or edit the following line: - pam_cert_auth = true + pam_cert_auth = True {{% if product in ["ol8", "rhel8"] %}} Add or update "pam_sss.so" with "try_cert_auth" or "require_cert_auth" in the