Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Red Hat 8 and above 'authselect' format for files in /etc/pam.d and /etc/authselect #275

Open
bschonec opened this issue Aug 23, 2024 · 0 comments

Comments

@bschonec
Copy link

The files in /etc/pam.d/ are managed a bit differently depending on whether the underlying authentication scripts are based on 'authconfig' (RHEL7 and older) or 'authselect' (RHEL8 and newer).

For authconfig (RHEL7 and older) some of the files are:

/etc/pam.d/fingerprint-auth-ac
/etc/pam.d/password-auth-ac
/etc/pam.d/system-auth-ac

with symbolic links from eg:

/etc/pam.d/fingerprint-auth -> fingerprint-auth-ac
/etc/pam.d/password-auth -> /etc/pam.d/password-auth-ac
/etc/pam.d/system-auth -> /etc/pam.d/system-auth-ac

RHEL8 and newer uses authselect which has symlinks in /etc/pam.d to their appropriate files in /etc/authselect/ eg:

/etc/pam.d/fingerprint-auth -> /etc/authselect/fingerprint-auth
/etc/pam.d/password-auth -> /etc/authselect/password-auth
/etc/pam.d/system-auth -> /etc/authselect/system-auth

Should this module manage the files in /etc/authselect/ and then create symlinks in /etc/pam.d or should this module continue to manage the files in /etc/pam.d (which technically, is incorrect). If the latter, should the symlinks from password-auth -> password-auth-ac (and others) be removed to maintain some level of correctness when using authselect?

'authselect' complains when there are no symlinks from /etc/pam.d to /etc/authselect. If this module manages the files in /etc/authselect, then 'authselect' is less cranky.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant