AUTHCONFIG(8)							AUTHCONFIG(8)



NAME
       authconfig  -  an  interface  for  configuring  system  authentication
       resources

SYNOPSIS
       authconfig  [--back]  [--test]  [--nostart]  [--kickstart]   [--probe]
       [--enablecache]	[--disablecache]  [--enablenis [--nisdomain ]
       [--nisserver ] ]  [--disablenis]  [--enable-
       shadow] [--disableshadow] [--enablemd5] ] [--disablemd5] ] [--enablel-
       dap]	 [--enableldapauth]	 [--enableldaptls]	[--ldapserver
       ] [--ldapbasedn ] [--disableldap]
       [--disableldapauth] [--enablekrb5 [ --krb5realm 	]  [--krb5kdc
       ]     [--krb5adminserver     ]	   [--enablekrb5kdcdns]		[--disablekrb5kdcdns]
       [--enablekrb5realmdns]	[--disablekrb5realmdns]	  ]   [--disablekrb5]
       [--enablehesiod [--hesiodlhs ] [--hesiodrhs ] ]  [--disable-
       hesiod]	[--enablesmbauth]  [--smbworkgroup ] [--smbservers
       ] [--disablesmbauth]  [--enablewinbind	[--enablewin-
       bindauth]    [--smbsecurity    ]	  [--smbrealm
       ] [--smbidmapuid=]	 [--smbidmapgid=]  [--winbind-
       separator=<\>]  [--winbindtemplateprimarygroup=] [--winbindtem-
       platehomedir=]  [--winbindtemplateshell=]  ]  [--dis-
       ablewinbind]  [--disablewinbindauth] [--enablewinbindusedefaultdomain]
       [--disablewinbindusedefaultdomain]	[--winbindjoin	     ]
       [--enablewins] [--disablewins]

DESCRIPTION
       authconfig provides a simple method of configuring /etc/sysconfig/net-
       work to handle NIS, as well as /etc/passwd and /etc/shadow, the	files
       used  for  shadow  password  support.  Basic LDAP, Kerberos 5, and SMB
       (authentication) client configuration is also provided.

       The authconfig window contains a Cancel button by default.  If  --back
       is  specified  at  run  time,  a	 Back button is presented instead. If
       --test is specified, authconfig can be run by users other  then	root,
       and any configuration changes are not saved. If --nostart is specified
       (which is what the install program does), ypbind will not  be  started
       or  stopped  immediately following program execution, but only enabled
       to start or stop at boot time. if --kickstart is specified, no  inter-
       active  screens will be seen.  The values the program will use will be
       those specified by the  other  options  (--enablemd5,  --enableshadow,
       etc.).

       The  --enablenis,  --enableldap,	 --enablewinbind,  and --enablehesiod
       options are used to configure user information services	in  /etc/nss-
       witch.conf,  the --enablecache option is used to configure naming ser-
       vices caching, and the --enableshadow, --enablemd5,  --enableldapauth,
       --enablekrb5,  --enablewinbindauth,  and	 --enablesmbauth  options are
       used to configure authentication functions via /etc/pam.d/system-auth.
       Each  --enable  has a matching --disable option that disables the ser-
       vice if it is already enabled. The respective services have parameters
       which configure their server names etc.

       The  --probe  flag  instructs authconfig to use DNS and other means to
       guess at configuration information for the  current  host,  print  its
       guesses if it finds them to standard output, and exit.

       The default in kickstart mode (i.e. without any additional options) is
       to not change the current settings.


RETURN CODES
       authconfig returns 0 on success, 2 on error, and 1 if  the  user	 can-
       celled the program (by using either the Cancel or Back button).


FILES
       /etc/sysconfig/authconfig
	      Used  to	track whether or not particular authentication
	      mechanisms are enabled.	Currently  includes  variables
	      named   USESHADOW,   USEMD5,  USEKERBEROS,  USELDAPAUTH,
	      USESMBAUTH, USEWINBIND, USEWINBINDAUTH, USEHESIOD,  USE-
	      NIS, USELDAP.
       /etc/passwd,
	      Used for shadow password support.
       /etc/yp.conf
	      Configuration file for NIS support.
       /etc/sysconfig/network
	      Another configuration file for NIS support.
       /etc/ldap.conf
	      /etc/openldap/ldap.conf  Used  to	 configure  LDAP  (and
	      OpenLDAP, respectively).
       /etc/krb5.conf
	      Used to configure Kerberos 5.
       /etc/krb.conf
	      Used to configure Kerberos IV (write-only).
       /etc/hesiod.conf
	      Used to configure Hesiod.
       /etc/pam_smb.conf
	      Used to configure SMB authentication.
       /etc/samba/smb.conf
	      Used to configure winbind authentication.
       /etc/nsswitch.conf
	      Used to configure user information services.
       /etc/pam.d/system-auth
	      Used  to	configure  PAM	 for   system	services   via
	      pam_stack(8).


SEE ALSO
       passwd(5), shadow(5), pwconv(1), domainname(1), ypbind(8), nss-
       witch.conf(5), smb.conf(5)


AUTHORS
       Nalin Dahyabhai , Preston Brown , Matt Wilson 



4th Berkeley Distribution      6 February 2004			AUTHCONFIG(8)

UNIX/Linux commands referenced on this page:

1. as
2. at
3. time
4. users
5. install
6. ypbind
7. which
8. host
9. file