Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.

Bug 1558245

Summary: wrong authselect syntax for *-disable-logins
Product: [Fedora] Fedora Reporter: RenĂ© Genz <liebundartig>
Component: realmdAssignee: Sumit Bose <sbose>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 28CC: jhrozek, sbose, stefw
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: realmd-0.16.3-12.fc28 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-04-01 00:42:08 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description René Genz 2018-03-19 21:46:10 UTC
Description of problem:
`sudo realm leave -v -U ${NAME} ${ADDS}` uses wrong authselect syntax with:
`/usr/bin/authselect sssd with-mkhomedir`
it must be
`/usr/bin/authselect select sssd with-mkhomedir`

The error message is not shown without '-v' option for `realm leave`.


Version-Release number of selected component (if applicable):
$ rpm -q realmd
realmd-0.16.3-11.fc28.x86_64

How reproducible:
easy, 100%

Steps to Reproduce:
1. install Fedora 28 Workstation x86_64 (or minimal environment)
2. install group "Domain Membership"
3. join Microsoft Active Directory Domain (ADDS) (FreeIPA domain is affected too)
4. $ sudo realm leave -v -U ${NAME} ${ADDS}

Actual results:
Password for ${NAME}: 
...
 * Removing domain configuration from sssd.conf
 * /usr/bin/authselect sssd with-mkhomedir
Usage:
/usr/bin/authselect COMMAND COMMAND-ARGS

Available commands:
- select             Select profile
- list               List available profiles
- show               Show profile information
- current            Get identificator of currently selected profile
- check              Check if the current configration is valid
- test               Print changes that would be otherwise written
- enable-feature     Enable feature in currently selected profile
- disable-feature    Disable feature in currently selected profile

Common options:
  --debug            Print error messages
  --trace            Print trace messages
  --warn             Print warning messages

Help options:
  -?, --help         Show this for a command
  --usage            Show brief usage message for a command
 ! Disabling sssd in PAM failed.
 * /usr/bin/systemctl disable sssd.service
Removed /etc/systemd/system/multi-user.target.wants/sssd.service.
 * /usr/bin/systemctl stop sssd.service
 * Successfully unenrolled machine from realm

Expected results:
....
 * /usr/bin/authselect select sssd 
....

Additional info:
I pushed the fix upstream and was asked to create this Bugzilla ticket for proper tracking: https://src.fedoraproject.org/rpms/realmd/pull-request/1

Comment 1 Fedora Update System 2018-03-20 14:41:07 UTC
realmd-0.16.3-12.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-0c1670b318

Comment 2 Fedora Update System 2018-03-21 14:13:12 UTC
realmd-0.16.3-12.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-0c1670b318

Comment 3 Fedora Update System 2018-04-01 00:42:08 UTC
realmd-0.16.3-12.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.