[ActiveDirectory] Fix usage of authselect which used to cause node boostrap failures on Rocky 9.5+ when directory service is used.

Author: gmarciani

CHANGELOG.md

@@ -41,6 +41,7 @@ This file is used to list changes made in each version of the AWS ParallelCluste
 - Remove usage of cfn-init for compute node bootstrapping to reduce node scale up time.
 - Fix the execution of overriding aws-parallelcluster-node package only on the head node during update.
 - Fix an issue where containerized jobs executed through Pyxis/Enroot in a multi-user environment (integrated with Active Directory) would fail.
+- Fix usage of authselect which used to cause node boostrap failures on Rocky 9.5+ when directory service is used.
 
 3.12.0
 ------

cookbooks/aws-parallelcluster-environment/resources/system_authentication/system_authentication_rocky8.rb

@@ -28,7 +28,7 @@
     user 'root'
     # Tell NSS, PAM to use SSSD for system authentication and identity information
     # authconfig is a compatibility tool, replaced by authselect
-    command "authselect select sssd with-mkhomedir"
+    command "authselect select sssd with-mkhomedir --force"
     sensitive true
     default_env true
   end

cookbooks/aws-parallelcluster-environment/spec/unit/resources/system_authentication_spec.rb

@@ -60,6 +60,8 @@ def self.configure(chef_run)
           'authconfig --enablemkhomedir --enablesssdauth --enablesssd --updateall'
         when 'ubuntu'
           'pam-auth-update --enable mkhomedir'
+        when 'rocky'
+          'pam-auth-update --enable mkhomedir --force'
         else
           'authselect select sssd with-mkhomedir'
         end