[Pkg-freeipa-devel] Bug#924015: Depends on oddjob-mkhomedir but doesn't use it

[Sam Morris]

Package: freeipa-client
Version: 4.7.2-2
Severity: minor

But in ipaplatform/debian/tasks.py, I noticed:

    if mkhomedir:
	try:
	    ipautil.run(["pam-auth-update",
			 "--package", "--enable", "mkhomedir"])

I don't know whether it would be better to downgrade the dependency on
oddjob-mkhomedir to Suggests, or whether this delta between Debian and
Red Hat could be reduced (which would required oddjob-mkhomedir to ship
a file in /usr/share/pam-configs).

It looks like Red Hat support only pam_oddjob_mkhomedir because it is
able to set the correct SELinux types on the newly-created home
directory[0].

[0] https://access.redhat.com/discussions/903523

-- System Information:
Debian Release: 9.8
  APT prefers stable-updates
  APT policy: (540, 'stable-updates'), (540, 'stable'), (520, 'testing'), (510, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)

Kernel: Linux 4.9.0-8-686-pae (SMP w/1 CPU core)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages freeipa-client depends on:
ii  bind9utils                   1:9.10.3.dfsg.P4-12.3+deb9u4
pn  certmonger                   <none>
ii  curl                         7.52.1-5+deb9u9
ii  dnsutils                     1:9.10.3.dfsg.P4-12.3+deb9u4
pn  freeipa-common               <none>
ii  krb5-user                    1.15-1+deb9u1
pn  libbasicobjects0             <none>
ii  libc6                        2.24-11+deb9u4
pn  libcollection4               <none>
pn  libcom-err2                  <none>
pn  libini-config5               <none>
ii  libk5crypto3                 1.15-1+deb9u1
ii  libkrb5-3                    1.15-1+deb9u1
ii  libldap-2.4-2                2.4.44+dfsg-5+deb9u2
ii  libnspr4                     2:4.12-6
pn  libnss-sss                   <none>
ii  libnss3                      2:3.26.2-1.1+deb9u1
pn  libnss3-tools                <none>
pn  libpam-sss                   <none>
ii  libpopt0                     1.16-10+b2
pn  libref-array1                <none>
ii  libsasl2-2                   2.1.27~101-g0780600+dfsg-3
pn  libsasl2-modules-gssapi-mit  <none>
ii  libssl1.1                    1.1.0j-1~deb9u1
pn  libsss-sudo                  <none>
pn  libxmlrpc-core-c3            <none>
pn  oddjob-mkhomedir             <none>
ii  python                       2.7.13-2
ii  python-dnspython             1.15.0-1+deb9u1
pn  python-gssapi                <none>
pn  python-ipaclient             <none>
pn  python-ldap                  <none>
pn  python-sss                   <none>
pn  sssd                         <none>

Versions of packages freeipa-client recommends:
pn  chrony  <none>

Versions of packages freeipa-client suggests:
ii  libpam-krb5  4.7-4