From Fedora Project Wiki
(Add authselect link)
 
(6 intermediate revisions by 2 users not shown)
Line 27: Line 27:
 
CLOSED as NEXTRELEASE -> change is completed and verified and will be delivered in next release under development
 
CLOSED as NEXTRELEASE -> change is completed and verified and will be delivered in next release under development
 
-->
 
-->
* Tracker bug: <will be assigned by the Wrangler>
+
* Tracker bug: [https://bugzilla.redhat.com/show_bug.cgi?id=1406000 #1406000]
  
 
== Detailed Description ==
 
== Detailed Description ==
  
There is plentiful of authconfig code that is not really usable in the modern environment such as the support for WINS or Hesiod. Also the TUI and GUI of Authconfig is using unmaintained libraries such as GTK+2 and Glade. There are no resources to further develop these and port them to current GUI toolkits. The TUI was declared as deprecated a very long time ago. The current modern environments support autoconfiguration of the remote user identity and authentication via realmd and sssd and do not need any manual configuration through GUI. There is also an effort underway to develop a new tool for setup of PAM and NSSWITCH with better use of SSSD. But we understand that some of the command line functionality of authconfig might still be useful in some environments and also to support the anaconda kickstart %auth command. To keep the authconfig code maintainable in future (in a kind of legacy mode) we need to cut out the parts that are not maintainable anymore or just complicate the code without any real user benefit.
+
There is plentiful of Authconfig code that is not really usable in the modern environment such as the support for WINS or Hesiod. Also the TUI and GUI of Authconfig is using unmaintained libraries such as GTK+2 and Glade. There are no resources to further develop these and port them to current GUI toolkits. The TUI was declared as deprecated a very long time ago. The current modern environments support autoconfiguration of the remote user identity and authentication via Realmd and SSSD and do not need any manual configuration through GUI. There is also an effort underway to develop a new tool for setup of PAM and NSSWITCH with better use of SSSD (called ''authselect'' - see [https://fedoraproject.org/wiki/Changes/Authselect Fedora Change] and [https://github.com/pbrezina/authselect GitHub project]). But we understand that some of the command line functionality of Authconfig might still be useful in some environments and also to support the Anaconda kickstart %auth command. To keep the Authconfig code maintainable in future (in a kind of legacy mode) we need to cut out the parts that are not maintainable anymore or just complicate the code without any real user benefit.
  
 
== Benefit to Fedora ==
 
== Benefit to Fedora ==
Line 112: Line 112:
 
-->
 
-->
  
[[Category:ChangePageIncomplete]]
+
[[Category:ChangeAcceptedF26]]
 
<!-- When your change proposal page is completed and ready for review and announcement -->
 
<!-- When your change proposal page is completed and ready for review and announcement -->
 
<!-- remove Category:ChangePageIncomplete and change it to Category:ChangeReadyForWrangler -->
 
<!-- remove Category:ChangePageIncomplete and change it to Category:ChangeReadyForWrangler -->

Latest revision as of 11:47, 1 September 2017

Authconfig Cleanup

Summary

Removal of obsolete and unmaintainable code from Authconfig such as the support for configuring Hesiod and the authconfig GTK2 based GUI and TUI.

Owner

Current status

Detailed Description

There is plentiful of Authconfig code that is not really usable in the modern environment such as the support for WINS or Hesiod. Also the TUI and GUI of Authconfig is using unmaintained libraries such as GTK+2 and Glade. There are no resources to further develop these and port them to current GUI toolkits. The TUI was declared as deprecated a very long time ago. The current modern environments support autoconfiguration of the remote user identity and authentication via Realmd and SSSD and do not need any manual configuration through GUI. There is also an effort underway to develop a new tool for setup of PAM and NSSWITCH with better use of SSSD (called authselect - see Fedora Change and GitHub project). But we understand that some of the command line functionality of Authconfig might still be useful in some environments and also to support the Anaconda kickstart %auth command. To keep the Authconfig code maintainable in future (in a kind of legacy mode) we need to cut out the parts that are not maintainable anymore or just complicate the code without any real user benefit.

Benefit to Fedora

There will still be a command line tool to manually manipulate the PAM, NSSWITCH, Kerberos and LDAP configuration if needed which can be maintained in future.

Scope

  • Proposal owners: Cleanup the Authconfig code, release a new upstream version and import it to Fedora.
  • Other developers: N/A (not a System Wide Change)
  • Release engineering: N/A (not a System Wide Change)
  • Policies and guidelines: N/A (not a System Wide Change)
  • Trademark approval: N/A (not needed for this Change)

Upgrade/compatibility impact

N/A (not a System Wide Change)

How To Test

N/A (not a System Wide Change)

User Experience

N/A (not a System Wide Change)

Dependencies

N/A (not a System Wide Change)

Contingency Plan

  • Contingency mechanism: N/A (not a System Wide Change)
  • Contingency deadline: N/A (not a System Wide Change)
  • Blocks release? N/A (not a System Wide Change)
  • Blocks product? N/A

Documentation

N/A (not a System Wide Change)

Release Notes