Skip to content

Modify loginsets image to support IPA/IdM+external IdP auth #15

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Asserzayed wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Modify loginsets image to support IPA/IdM+external IdP auth #15

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
4fd3445
Update Dockerfile to enhance SSSD and SSH configuration specially for…
Asserzayed Apr 16, 2026
6a19878
Merge pull request #1 from Asserzayed/Asserzayed-sssd-ipa-idm-rockyli…
Asserzayed Apr 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 5 additions & 1 deletion schedmd/slurm/25.11/rockylinux9/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -325,13 +325,17 @@ set -xeuo pipefail
dnf -q -y install --setopt='install_weak_deps=False' \
socat \
openssh-server \
authselect sssd sssd-ad sssd-ldap
authselect sssd sssd-ad sssd-ipa sssd-krb5 sssd-ldap sssd-idp \
krb5-pkinit
# Configure
mkdir -p /etc/authselect
authselect select sssd with-mkhomedir --force
rm -f /etc/ssh/ssh_host_*
EOR

# Override sshd config to enable keyboard-interactive for OAuth2/IdP auth
RUN echo "KbdInteractiveAuthentication yes" > /etc/ssh/sshd_config.d/00-ipa-idp.conf
Comment on lines +336 to +337
Copy link
Copy Markdown
Contributor

@SkylerMalinowski SkylerMalinowski Apr 24, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You are free to customize this into your deployment or image, but Slinky bases should not be making opinions in this way. This change will not be accepted.


COPY files/etc/supervisord.conf /etc/
COPY \
files/etc/supervisord.d/fakesystemd-slurm.ini \
Expand Down