fedora-cosmic: add Kanidm Unix authentication

Install kanidm-unixd-clients/kanidm-clients, point /etc/kanidm/config at auth.plabble.org, configure unixd (TPM-backed cache, pam_allowed_login_groups), and set up PAM/nsswitch via an authselect custom profile (with a direct-file fallback). Enable kanidm-unixd{,-tasks} and make unconfined_service_t permissive until Kanidm ships an SELinux policy.
2026-09-21 17:57:32 +02:00
parent de5b0f143a
commit dd2bf634f1
7 changed files with 118 additions and 0 deletions
@@ -0,0 +1,14 @@
+passwd:     kanidm compat systemd
+group:      kanidm compat systemd
+shadow:     files
+hosts:      files dns myhostname
+services:   files
+netgroup:   files
+automount:  files
+aliases:    files
+ethers:     files
+gshadow:    files
+networks:   files dns
+protocols:  files
+publickey:  files
+rpc:        files