| |
@@ -52,3 +52,12 @@
|
| |
The OpenLDAP project also https://www.openldap.org/doc/admin24/security.html#TCP%20Wrappers[discourages their use] and recommends that an IP firewall is used instead.
|
| |
With this update, OpenLDAP will not be configured with `--enable-wrappers` and so any TCP wrappers configuration will have no effect on OpenLDAP.
|
| |
Other means should be used to protect the OpenLDAP server.
|
| |
+
|
| |
+
|
| |
+ == Replace authconfig with authselect
|
| |
+
|
| |
+ Fedora 28 replaces authconfig with authselect as the default tool for generating PAM configuration files and nsswitch.conf.
|
| |
+ On new installations, authselect, together with an authconfig compatibility tool, will be installed by default instead of authconfig.
|
| |
+ On upgraded installations, authconfig will be replaced with authselect and the compatibility tool but the configuration generated by authconfig will be left intact.
|
| |
+ The authconfig compatibility tool will be removed from Fedora in a future release.
|
| |
+ The https://github.com/pbrezina/authselect/tree/master/src/man/authselect-migration.7.txt.in.in[authselect-migration(7)] man page explains how to migrate from authconfig to authselect.
|
| |
This PR contains the draft release note for Issue #76: 'Make authselect default tool instead of authconfig'. @pbrezina please would you review the text and let me know if anything needs to be added, changed or removed?