Install kanidm-unixd-clients/kanidm-clients, point /etc/kanidm/config at
auth.plabble.org, configure unixd (TPM-backed cache, pam_allowed_login_groups),
and set up PAM/nsswitch via an authselect custom profile (with a direct-file
fallback). Enable kanidm-unixd{,-tasks} and make unconfined_service_t
permissive until Kanidm ships an SELinux policy.
4 lines
100 B
Plaintext
4 lines
100 B
Plaintext
# Kanidm Unix authentication daemons.
|
|
enable kanidm-unixd.service
|
|
enable kanidm-unixd-tasks.service
|