Closed stoeps13 closed 2 years ago
There are several tasks which shall disable fingerprinting:
roles/hcl/connections-wizards/tasks/setup_connections_docs.yml:- name: Disable fingerprinting roles/hcl/connections-wizards/tasks/setup_connections_docs.yml- command: authconfig --disablefingerprint --update roles/hcl/connections-wizards/tasks/setup_connections_docs.yml- when: roles/hcl/connections-wizards/tasks/setup_connections_docs.yml- - not docs_migrations_already_done.stat.exists -- roles/hcl/connections-wizards/tasks/setup_connections_docs_mssql.yml:- name: Disable fingerprinting roles/hcl/connections-wizards/tasks/setup_connections_docs_mssql.yml- command: authconfig --disablefingerprint --update roles/hcl/connections-wizards/tasks/setup_connections_docs_mssql.yml- when: roles/hcl/connections-wizards/tasks/setup_connections_docs_mssql.yml- - not docs_migrations_already_done.stat.exists -- roles/hcl/connections-wizards/tasks/setup_connections_docs_oracle.yml:- name: Disable fingerprinting roles/hcl/connections-wizards/tasks/setup_connections_docs_oracle.yml- command: authconfig --disablefingerprint --update roles/hcl/connections-wizards/tasks/setup_connections_docs_oracle.yml- when: roles/hcl/connections-wizards/tasks/setup_connections_docs_oracle.yml- - not docs_migrations_already_done.stat.exists -- roles/hcl/connections-wizards/tasks/setup_connections_wizards_mssql.yml:- name: Disable fingerprinting roles/hcl/connections-wizards/tasks/setup_connections_wizards_mssql.yml- command: authconfig --disablefingerprint --update roles/hcl/connections-wizards/tasks/setup_connections_wizards_mssql.yml- when: roles/hcl/connections-wizards/tasks/setup_connections_wizards_mssql.yml- - not migrations_already_done.stat.exists -- roles/hcl/connections-wizards/tasks/setup_connections_wizards_oracle.yml:- name: Disable fingerprinting roles/hcl/connections-wizards/tasks/setup_connections_wizards_oracle.yml- command: authconfig --disablefingerprint --update roles/hcl/connections-wizards/tasks/setup_connections_wizards_oracle.yml- when: roles/hcl/connections-wizards/tasks/setup_connections_wizards_oracle.yml- - not migrations_already_done.stat.exists -- roles/hcl/connections-wizards/tasks/setup_connections_wizards.yml:- name: Disable fingerprinting roles/hcl/connections-wizards/tasks/setup_connections_wizards.yml- command: authconfig --disablefingerprint --update roles/hcl/connections-wizards/tasks/setup_connections_wizards.yml- when: roles/hcl/connections-wizards/tasks/setup_connections_wizards.yml- - not migrations_already_done.stat.exists
This ends with:
TASK [connections-wizards : Disable fingerprinting] ********************************************************************************************************************************************************************************** fatal: [cnx7-rh8-db2.stoeps.home]: FAILED! => changed=false cmd: authconfig --disablefingerprint --update msg: '[Errno 2] No such file or directory: b''authconfig'': b''authconfig''' rc: 2 stderr: '' stderr_lines: <omitted> stdout: '' stdout_lines: <omitted>
On minimal installation the package authselect-compat is not installed. So if you want to use the command you should check that it is installed first.
authselect-compat
I'm really curious why these tasks are included, as fingerprinting is only available when a fingerprint hardware is found. https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system-level_authentication_guide/fingerprints
So remove, add a conditional or check for the command first please.
Addressed in Feb 2022 release.
There are several tasks which shall disable fingerprinting:
This ends with:
On minimal installation the package
authselect-compat
is not installed. So if you want to use the command you should check that it is installed first.I'm really curious why these tasks are included, as fingerprinting is only available when a fingerprint hardware is found. https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/system-level_authentication_guide/fingerprints
So remove, add a conditional or check for the command first please.