You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The files in /etc/pam.d/ are managed a bit differently depending on whether the underlying authentication scripts are based on 'authconfig' (RHEL7 and older) or 'authselect' (RHEL8 and newer).
For authconfig (RHEL7 and older) some of the files are:
Should this module manage the files in /etc/authselect/ and then create symlinks in /etc/pam.d or should this module continue to manage the files in /etc/pam.d (which technically, is incorrect). If the latter, should the symlinks from password-auth -> password-auth-ac (and others) be removed to maintain some level of correctness when using authselect?
'authselect' complains when there are no symlinks from /etc/pam.d to /etc/authselect. If this module manages the files in /etc/authselect, then 'authselect' is less cranky.
The text was updated successfully, but these errors were encountered:
The files in /etc/pam.d/ are managed a bit differently depending on whether the underlying authentication scripts are based on 'authconfig' (RHEL7 and older) or 'authselect' (RHEL8 and newer).
For authconfig (RHEL7 and older) some of the files are:
/etc/pam.d/fingerprint-auth-ac
/etc/pam.d/password-auth-ac
/etc/pam.d/system-auth-ac
with symbolic links from eg:
/etc/pam.d/fingerprint-auth -> fingerprint-auth-ac
/etc/pam.d/password-auth -> /etc/pam.d/password-auth-ac
/etc/pam.d/system-auth -> /etc/pam.d/system-auth-ac
RHEL8 and newer uses authselect which has symlinks in /etc/pam.d to their appropriate files in /etc/authselect/ eg:
/etc/pam.d/fingerprint-auth -> /etc/authselect/fingerprint-auth
/etc/pam.d/password-auth -> /etc/authselect/password-auth
/etc/pam.d/system-auth -> /etc/authselect/system-auth
Should this module manage the files in /etc/authselect/ and then create symlinks in /etc/pam.d or should this module continue to manage the files in /etc/pam.d (which technically, is incorrect). If the latter, should the symlinks from password-auth -> password-auth-ac (and others) be removed to maintain some level of correctness when using authselect?
'authselect' complains when there are no symlinks from /etc/pam.d to /etc/authselect. If this module manages the files in /etc/authselect, then 'authselect' is less cranky.
The text was updated successfully, but these errors were encountered: