githubmirror/authselect

profiles/minimal/README
60 строк2 KB
Pavel Březina
profiles: add with-pwhistory feature
29 сен 2022, 13:35
29 сен 2022, 13:35a0c65ae
Local users only for minimal installations
==========================================

Selecting this profile will enable local files as the source of identity
and authentication providers.

This profile can be used on systems that require minimal installation to
save disk and memory space. It serves only local users and groups directly
from system files instead of going through other authentication providers.
Therefore SSSD, winbind and fprintd packages can be safely removed.

Unless this system has strict memory and disk constraints, it is recommended
to keep SSSD running and use 'sssd' profile to avoid functional limitations.

AVAILABLE OPTIONAL FEATURES
---------------------------

with-faillock::
    Enable account locking in case of too many consecutive
    authentication failures.

with-mkhomedir::
    Enable automatic creation of home directories for users on their
    first login.

with-ecryptfs::
    Enable automatic per-user ecryptfs.

with-silent-lastlog::
    Do not produce pam_lastlog message during login.

with-pamaccess::
    Check access.conf during account authorization.

with-pwhistory::
    Enable pam_pwhistory module for local users.

with-altfiles::
    Use nss_altfiles for passwd and group nsswitch databases.

with-mdns4::
    Enable multicast DNS over IPv4.

with-mdns6::
    Enable multicast DNS over IPv6.

without-nullok::
    Do not add nullok parameter to pam_unix.

EXAMPLES
--------

* Enable minimal profile

  authselect select minimal

SEE ALSO
--------
* man passwd(5)
* man group(5)