1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
Local users only
================
Selecting this profile will enable local files as the source of identity
and authentication providers.
AVAILABLE OPTIONAL FEATURES
---------------------------
with-faillock::
Enable account locking in case of too many consecutive
authentication failures.
with-mkhomedir::
Enable automatic creation of home directories for users on their
first login.
with-ecryptfs::
Enable automatic per-user ecryptfs.
with-fingerprint::
Enable authentication with fingerprint reader through *pam_fprintd*.
with-pam-gnome-keyring::
Enable pam-gnome-keyring support.
with-pam-u2f::
Enable authentication via u2f dongle through *pam_u2f*.
with-pam-u2f-2fa::
Enable 2nd factor authentication via u2f dongle through *pam_u2f*.
without-pam-u2f-nouserok::
Module argument nouserok is omitted if also with-pam-u2f-2fa is used.
*WARNING*: Omitting nouserok argument means that users without pam-u2f
authentication configured will not be able to log in *INCLUDING* root.
Make sure you are able to log in before losing root privileges.
with-silent-lastlog::
Do not produce pam_lastlog message during login.
without-lastlog-showfailed::
Do not print number of failed login attempts during login.
with-pamaccess::
Check access.conf during account authorization.
with-pwhistory::
Enable pam_pwhistory module for local users.
with-altfiles::
Use nss_altfiles for passwd and group nsswitch databases.
with-mdns4::
Enable multicast DNS over IPv4.
with-mdns6::
Enable multicast DNS over IPv6.
with-systemd-homed::
If set, pam_systemd_homed is enabled for all pam operations.
with-libvirt::
Enable connecting to libvirt VMs using the hostname configured in the
guest OS or, as a fallback, their name.
without-nullok::
Do not add nullok parameter to pam_unix.
EXAMPLES
--------
* Enable local profile
authselect select local
SEE ALSO
--------
* man passwd(5)
* man group(5)
|
