fedora-cosmic: add Kanidm Unix authentication
Install kanidm-unixd-clients/kanidm-clients, point /etc/kanidm/config at
auth.plabble.org, configure unixd (TPM-backed cache, pam_allowed_login_groups),
and set up PAM/nsswitch via an authselect custom profile (with a direct-file
fallback). Enable kanidm-unixd{,-tasks} and make unconfined_service_t
permissive until Kanidm ships an SELinux policy.
This commit is contained in:
@@ -0,0 +1 @@
|
||||
uri = "https://auth.plabble.org"
|
||||
Reference in New Issue
Block a user