From 308ff1a8ce6d62a182f04d6b6ee4e63abf569286 Mon Sep 17 00:00:00 2001 From: Kevin Fenzi Date: Wed, 20 Sep 2023 12:07:06 -0700 Subject: [PATCH] Revert "ipa / client: pass --no-sshd to client enroll" This reverts commit df1445a64bc4714afa8204702114533a70ea4c4c. Turns out we do have to enable sshd on client enroll because it passes 'ssh' to services in sssd.conf, which we need to get ssh keys for users. :( Instead will try another approach. --- roles/ipa/client/tasks/main.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/roles/ipa/client/tasks/main.yml b/roles/ipa/client/tasks/main.yml index 8d0f91adc5..5d8c19b15d 100644 --- a/roles/ipa/client/tasks/main.yml +++ b/roles/ipa/client/tasks/main.yml @@ -27,7 +27,6 @@ -U -N --force-join --mkhomedir --no-ssh - --no-sshd creates: /etc/ipa/default.conf notify: clean sss caches tags: