fedora-OEMDRV

Author	SHA1	Message	Date
Daniel unbrot Pätzold	253030228f	logon_script: check DNS resolution before proceeding If the IPA server FQDN cannot be resolved at startup (e.g. due to a DNSSEC outage or network not yet ready), the logon script would silently fail later. The new check prompts the user to retry, continue anyway, or quit, so the problem is immediately visible. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-07 12:26:07 +02:00
Daniel unbrot Pätzold	f59ba70bb9	sync_client_software: patch sssd.conf to add krb5_validate = False SSSD >= 2.10.1 no longer raises CAP_DAC_READ_SEARCH to effective in offline mode, so validate_tgt fails with EACCES reading /etc/krb5.keytab before the cached-credential fallback is reached. Adding krb5_validate = False disables the keytab validation step and restores reliable offline authentication for FreeIPA domain users. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-07 12:26:07 +02:00
Daniel unbrot Pätzold	3906d19a4f	kickstart: cinnamon - Okular is kde only, use evince on cinnamon	2026-05-07 12:26:07 +02:00
Daniel unbrot Pätzold	9b4d68ca72	kickstarter: Include ocular in packages	2026-05-07 12:26:07 +02:00
obel1x	5238f778ad	Merge pull request 'kde: exclude plasma-setup and plasma-welcome to suppress first-boot wizard' (#27 ) from unbrot/fedora-OEMDRV:main into main Reviewed-on: obel1x/fedora-OEMDRV#27	2026-05-06 17:05:06 +02:00

Compare commits