MAN page from Trustix authconfig-4.2.12-6tr.i586.rpm

AUTHCONFIG

Section: Maintenance Commands (8)
Updated: Mon 30 July 2001
Index

NAME

authconfig - an interface for configuring system authentication resources

SYNOPSIS

authconfig [--back] [--test] [--nostart] [--kickstart] [--probe][--enablecache] [--disablecache][--enablenis [--nisdomain <domain>] [--nisserver <nisserver[,nisserver...]>] ][--disablenis][--enableshadow] [--disableshadow][--enablemd5] ] [--disablemd5] ][--enableldap [--enableldapauth] [--enableldapssl][--ldapserver <ldapserver>] [--ldapbasedn <basedn>] ][--disableldap] [--disableldapauth][--enablehesiod [--hesiodlhs <lhs>] [--hesiodrhs <rhs>] ] [--disablehesiod][--enablesmb [--smbworkgroup <workgroup>] [--smbservers <server[,server]>]]

DESCRIPTION

authconfig provides a simple method of configuring/etc/sysconfig/network to handle NIS, as well as /etc/passwd and/etc/shadow, the files used for shadow password support. Basic LDAPand SMB (authentication) client configuration is also provided.

The authconfig window contains a Cancel button by default. If--back is specified at run time, a Back button is presentedinstead. If --test is specified, authconfig can be run byusers other then root, and any configuration changes are not saved. If--nostart is specified (which is what the install program does),ypbind will not be started or stopped immediately following programexecution, but only enabled to start or stop at boot time. if--kickstart is specified, no interactive screens will be seen.The values the program will use will be those specified by the otheroptions (--enablemd5, --usehadow, etc.).

The --enablenis, --enableldap, and --enablehesiod optionsare used to configure user information services in /etc/nsswitch.conf,the --enablecache option is used to configure naming services caching,and the --enableshadow, --enablemd5, --enableldapauth,and --enablesmb options are used to configureauthentication functions via /etc/pam.d/system-auth. Each--enable has a matching --disable option that disables the serviceif it is already enabled.

The --probe flag instructs authconfig to use DNS and other meansto guess at configuration information for the current host, print its guessesto standard output, and exit.

The default in kickstart mode (i.e. without any additional options) is tonot change the current settings.

RETURN CODES

authconfig returns 0 on success, 2 on error, and 1 if the user cancelledthe program (by using either the Cancel or Back button).

FILES


/etc/sysconfig/authconfig: Used to track whether or not particular authentication mechanisms are enabled.Currently includes variables named USESHADOW, USEMD5, USELDAPAUTH,USESMBAUTH, USEHESIOD, USENIS, USELDAP.
/etc/passwd,: Used for shadow password support.
/etc/yp.conf: Configuration file for NIS support.
/etc/sysconfig/network: Another configuration file for NIS support.
/etc/ldap.conf: /etc/openldap/ldap.confUsed to configure LDAP (and OpenLDAP, respectively).
/etc/hesiod.conf: Used to configure Hesiod.
/etc/pam_smb.conf: Used to configure SMB authentication.

/etc/nsswitch.conf: Used to configure user information services.
/etc/pam.d/system-auth: Used to configure PAM for system services via pam_stack(8).

AUTHORS

Nalin Dahyabhai <nalin@redhat.com>, Preston Brown <pbrown@redhat.com>, Matt Wilson <mswAATTredhat.com>

This document was created byman2html,using the manual pages.