Zen

Source string Source string

61/10000 · 61

The string is read only.

English Actions
If you want to configure the machine to use Winbind, use `realm`. This will perform an initial setup which involves creating a Kerberos keytab and running `adcli` to join the domain. It also makes changes to `smb.conf`. You can then tune it up by modifying {sysconfdir}/samba/smb.conf.
NIS
There are several places that needs to be configured in order to make NIS authentication work. First, you need to set NIS domain and optionally also NIS server in {sysconfdir}/yp.conf.
{sysconfdir}/yp.conf
domain mydomain broadcast
# or
# domain mydomain server myserver
NIS domain must be also set in system network configuration.
{sysconfdir}/sysconfig/network
NISDOMAIN=mydomain
Now, you can set the domain name with command line so there is no need to reboot your system. Additionaly, it may be necessary to enable NIS in selinux.
$ domainname mydomain
$ setsebool -P allow_ypbind 1
PASSWORD QUALITY
Authselect enables `pam_pwquality` module to enforce password quality restrictions. This module is enabled only for local users. Remote users should use the password policy that is enforced by the respective remote server.
The `pam_pwquality` module can be configured in {sysconfdir}/security/pwquality.conf. See pam_pwquality(8) to see its configuration options and defaults.
STARTING SERVICES
Depending on your configuration, you need to start required services manually with systemd.
systemctl enable sssd.service ; systemctl start sssd.service
Winbind
systemctl enable winbind.service ; systemctl start winbind.service
systemctl enable rpcbind.service ; systemctl start rpcbind.service
systemctl enable ypbind.service ; systemctl start ypbind.service
If mkhomedir feature is enabled
systemctl enable oddjobd.service ; systemctl start oddjobd.service
AUTHCONFIG TOOLS
Authconfig shipped a tool called _cacertdir_rehash_. If you depend on this tool, please switch to native _openssl_ command: *openssl rehash <directory>* that serves the same purpose.
SEE ALSO
authselect(8), authselect-profiles(5), realm(8), ipa-client-install(1), sssd.conf(5), smb.conf(5), ldap.conf(5), krb5.conf(5)

Loading…

User avatar ersen

Comment added

  1. authselect
  2. master-authselect-migration.7.adoc
  3. English

these can be reduced to: systemctl enable --now sssd.service

4 years ago
Browse all string changes
User avatar ersen

Source string comment

these can be reduced to: systemctl enable --now sssd.service

4 years ago

Things to check

Multiple failing checks

Following checks are failing:
Unchanged translation: Czech, German, Spanish, French, Korean, Dutch, Russian, Swedish, Turkish, Ukrainian

Reset

Comments

There is 1 unresolved comment for this string.

View

Glossary

English English
No related strings found in the glossary.

String information

Source string description
type: Plain text
Flags
no-wrap, read-only
Source string location
src/man/authselect-migration.7.adoc:256
String age
4 years ago
Last updated
11 months ago
Source string age
4 years ago
Translation file
src/man/po/authselect-migration.7.adoc.pot, string 64