Install kanidm-unixd-clients/kanidm-clients, point /etc/kanidm/config at
auth.plabble.org, configure unixd (TPM-backed cache, pam_allowed_login_groups),
and set up PAM/nsswitch via an authselect custom profile (with a direct-file
fallback). Enable kanidm-unixd{,-tasks} and make unconfined_service_t
permissive until Kanidm ships an SELinux policy.
15 lines
303 B
Plaintext
15 lines
303 B
Plaintext
passwd: kanidm compat systemd
|
|
group: kanidm compat systemd
|
|
shadow: files
|
|
hosts: files dns myhostname
|
|
services: files
|
|
netgroup: files
|
|
automount: files
|
|
aliases: files
|
|
ethers: files
|
|
gshadow: files
|
|
networks: files dns
|
|
protocols: files
|
|
publickey: files
|
|
rpc: files
|