Re: [Freeipa-users] Change default shell from /bin/sh to /bin/bash from AD users
On Tue, Apr 02, 2013 at 08:43:18AM +0300, pekka.pan...@sofor.fi wrote: > Rob Crittenden wrote on 29.03.2013 01:09:49: > > > > > Anyhow, you can override the shell on the client using the > > > > override_shell directive of sssd.conf. Simply put it into the > domain > > > > section and restart the SSSD. > > > > > > Thanks for that tip, will try that one. > > > > Let me also note that changing the default shell doesn't change the > > shell for any existing users (not entirely sure how this applies to > > trust users, it might get particularly wonky on different machines as > > each machine's sssd cache could have a different shell). > > It worked when i did override_shell to [nss] section. > If i recall right, it did not worked when it was in [domain/domain.com] > section. > Ah, this part of functionality was added in 1.9.3 I think so it depends on the version you are running. ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Change default shell from /bin/sh to /bin/bash from AD users
Rob Crittenden wrote on 29.03.2013 01:09:49: > > > Anyhow, you can override the shell on the client using the > > > override_shell directive of sssd.conf. Simply put it into the domain > > > section and restart the SSSD. > > > > Thanks for that tip, will try that one. > > Let me also note that changing the default shell doesn't change the > shell for any existing users (not entirely sure how this applies to > trust users, it might get particularly wonky on different machines as > each machine's sssd cache could have a different shell). It worked when i did override_shell to [nss] section. If i recall right, it did not worked when it was in [domain/domain.com] section. Not worrying me if it forces all to bash, because we all use only it. BTW: is there any place when i can submit feature requests, eg. default shell IPA configuration to be used with AD trusts users also. Regards, Pekka Panula___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Change default shell from /bin/sh to /bin/bash from AD users
pekka.pan...@sofor.fi wrote: > One part of the question is not clear to me: > Is the context AD users coming via trusts or is the client configured to > access AD directly? They are from trust, not directly. > Anyhow, you can override the shell on the client using the > override_shell directive of sssd.conf. Simply put it into the domain > section and restart the SSSD. Thanks for that tip, will try that one. Let me also note that changing the default shell doesn't change the shell for any existing users (not entirely sure how this applies to trust users, it might get particularly wonky on different machines as each machine's sssd cache could have a different shell). rob ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Change default shell from /bin/sh to /bin/bash from AD users
> One part of the question is not clear to me: > Is the context AD users coming via trusts or is the client configured to > access AD directly? They are from trust, not directly. > Anyhow, you can override the shell on the client using the > override_shell directive of sssd.conf. Simply put it into the domain > section and restart the SSSD. Thanks for that tip, will try that one. Regards, Pekka Panula ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
Re: [Freeipa-users] Change default shell from /bin/sh to /bin/bash from AD users
On Thu, Mar 28, 2013 at 09:56:32AM +0200, pekka.pan...@sofor.fi wrote: > Hi all > > I have changed default shell to /bin/bash, but it seems when i logon to > Linux server with my AD username it executes /bin/sh anyway. > When i login with IPA account, it executes /bin/bash. > > So my question is how can i change AD users shell because it seems default > shell is not enough? > > My IPA server is running CentOS 6.4 and ipa client also CentOS 6.4. > > Regards, > Pekka Panula One part of the question is not clear to me: Is the context AD users coming via trusts or is the client configured to access AD directly? Anyhow, you can override the shell on the client using the override_shell directive of sssd.conf. Simply put it into the domain section and restart the SSSD. ___ Freeipa-users mailing list Freeipa-users@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-users
