From 25e68895b8b7d9164b3869b267192f3f6d07cee3 Mon Sep 17 00:00:00 2001 From: Simon Clark Date: Apr 27 2018 12:53:31 +0000 Subject: Add #76 'Make authselect default tool instead of authconfig' --- diff --git a/en-US/sysadmin/Security.adoc b/en-US/sysadmin/Security.adoc index c5f4ebc..fdff11a 100644 --- a/en-US/sysadmin/Security.adoc +++ b/en-US/sysadmin/Security.adoc @@ -52,3 +52,12 @@ Fedora has https://fedoraproject.org/wiki/Changes/Deprecate_TCP_wrappers[depreca The OpenLDAP project also https://www.openldap.org/doc/admin24/security.html#TCP%20Wrappers[discourages their use] and recommends that an IP firewall is used instead. With this update, OpenLDAP will not be configured with `--enable-wrappers` and so any TCP wrappers configuration will have no effect on OpenLDAP. Other means should be used to protect the OpenLDAP server. + + +== Replace authconfig with authselect + +Fedora 28 replaces authconfig with authselect as the default tool for generating PAM configuration files and nsswitch.conf. +On new installations, authselect, together with an authconfig compatibility tool, will be installed by default instead of authconfig. +On upgraded installations, authconfig will be replaced with authselect and the compatibility tool but the configuration generated by authconfig will be left intact. +The authconfig compatibility tool will be removed from Fedora in a future release. +The https://github.com/pbrezina/authselect/tree/master/src/man/authselect-migration.7.txt.in.in[authselect-migration(7)] man page explains how to migrate from authconfig to authselect.