T

Daniel unbrot Pätzold 6806a218a9 sync_client_software: patch sssd.conf to add krb5_validate = False

SSSD >= 2.10.1 no longer raises CAP_DAC_READ_SEARCH to effective in
offline mode, so validate_tgt fails with EACCES reading /etc/krb5.keytab
before the cached-credential fallback is reached. Adding krb5_validate =
False disables the keytab validation step and restores reliable offline
authentication for FreeIPA domain users.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-07 09:49:51 +02:00

client_software

nextcloud/user_run: centralise Flatpak app ID and data dir path

2026-05-05 08:50:21 +02:00

config

Added Readme for config dir

2026-05-03 15:34:19 +02:00

config.d

Add Readme for config.d

2026-04-25 15:39:25 +02:00

ks_base_profiles

kickstart: cinnamon - Okular is kde only, use evince on cinnamon

2026-05-06 17:38:37 +02:00

system_setup

sync_client_software: patch sssd.conf to add krb5_validate = False

2026-05-07 09:49:51 +02:00

.gitignore

include *.bak in config dirs to gitignore

2026-05-04 19:40:42 +02:00

CLAUDE.md

inc.sh: use BASH_SOURCE for path resolution; add --missingconfok; fix install.sh sourcing and git pull logic

2026-05-03 18:42:12 +02:00

configure.md

configure.sh: allow root and non-root execution

2026-05-03 13:43:09 +02:00

install.md

confige: source dists defaults to for robustnes

2026-05-06 09:06:30 +02:00

README.md

Prepare base profiles for selection

2026-04-29 19:31:07 +02:00

README.md

Fedora automated install script collection

an automated massinstallation scripting collection for Fedora and Anaconda

IN DEVELOPMENT !

This Software is very Specific, it needs at least:

A Free IPA Server in which IP Clients can be enrolled to
An Admin that has the rights to do so
A Nextcloud instance, connected to the Domain which should have Software Configuration and Reository Paths setup
A client pc that will use this software to automate install and setup the PC

Install

Look at the file install.md

more to come