Linux command
authselect 命令
文本
复制后可按需替换文件名、目录或参数。
常用示例
List available profiles
authselect list
Show current configuration
authselect current
Select the SSSD profile
sudo authselect select sssd --force
Select SSSD profile
sudo authselect select sssd with-fingerprint --force
Select the Winbind profile
sudo authselect select winbind --force
Enable a feature
sudo authselect enable-feature with-mkhomedir
Backup current configuration
sudo authselect backup [backup-name]
Restore from backup
sudo authselect backup-restore [backup-name]
说明
authselect configures system authentication sources by managing PAM stack and nsswitch.conf files through predefined profiles. It replaced authconfig starting with Fedora 28 and RHEL 8. Profiles define how users are authenticated and where identity information is retrieved. The sssd profile is most common for enterprise environments using LDAP, FreeIPA, or Active Directory. The winbind profile provides an alternative for Active Directory integration. Authselect only configures PAM and nsswitch; it does not configure the underlying daemons (SSSD, Winbind). Use tools like realm join or ipa-client-install to set up domain membership, which automatically configure authselect. Custom profiles can be created by copying and modifying existing profiles in /etc/authselect/custom/.
参数
- list
- List available profiles
- show _profile_
- Display information about a profile
- current
- Show currently selected profile and features
- select _profile_ _features_
- Activate a profile with optional features
- enable-feature _feature_
- Enable a feature on the current profile
- disable-feature _feature_
- Disable a feature on the current profile
- backup _name_
- Backup current system configuration
- backup-restore _name_
- Restore configuration from backup
- backup-list
- List available backups
- opt-out
- Remove authselect management of configuration
- --force
- Overwrite existing non-authselect configuration
- -b, --backup
- Create backup before making changes
- -q, --quiet
- Suppress output messages
FAQ
What is the authselect command used for?
authselect configures system authentication sources by managing PAM stack and nsswitch.conf files through predefined profiles. It replaced authconfig starting with Fedora 28 and RHEL 8. Profiles define how users are authenticated and where identity information is retrieved. The sssd profile is most common for enterprise environments using LDAP, FreeIPA, or Active Directory. The winbind profile provides an alternative for Active Directory integration. Authselect only configures PAM and nsswitch; it does not configure the underlying daemons (SSSD, Winbind). Use tools like realm join or ipa-client-install to set up domain membership, which automatically configure authselect. Custom profiles can be created by copying and modifying existing profiles in /etc/authselect/custom/.
How do I run a basic authselect example?
Run `authselect list` in a terminal, then adjust file names, paths, flags, or remote targets for your system.
What does list do in authselect?
List available profiles