P. 1
System Administration Guide

System Administration Guide

|Views: 4|Likes:
Publicado porRichard D Armstrong

More info:

Published by: Richard D Armstrong on Sep 02, 2011
Copyright:Attribution Non-commercial

Availability:

Read on Scribd mobile: iPhone, iPad and Android.
download as PDF, TXT or read online from Scribd
See more
See less

05/24/2012

pdf

text

original

The Authentication Configuration Tool can also be run as a command line tool with no interface.
Thecommand line version can be used ina configuration script orakickstart script. Theauthentication
options are summarized in Table 27-1.

Tip

These options can also be found in the authconfig man page or by typing authconfig --help at a
shell prompt.

Option

Description

--enableshadow

Enable shadow passwords

--disableshadow

Disable shadow passwords

--enablemd5

Enable MD5 passwords

--disablemd5

Disable MD5 passwords

--enablenis

Enable NIS

--disablenis

Disable NIS

--nisdomain=<domain>

Specify NIS domain

--nisserver=<server>

Specify NIS server

--enableldap

Enable LDAP for user information

--disableldap

Disable LDAP for user information

--enableldaptls

Enable use of TLS with LDAP

--disableldaptls

Disable use of TLS with LDAP

--enableldapauth

Enable LDAP for authentication

--disableldapauth

Disable LDAP for authentication

--ldapserver=<server>

Specify LDAP server

--ldapbasedn=<dn>

Specify LDAP base DN

--enablekrb5

Enable Kerberos

--disablekrb5

Disable Kerberos

--krb5kdc=<kdc>

Specify Kerberos KDC

--krb5adminserver=<server>

Specify Kerberos administration
server

--krb5realm=<realm>

Specify Kerberos realm

Chapter 27. Authentication Configuration

227

Option

Description

--enablekrb5kdcdns

Enable use of DNS to find Kerberos
KDCs

--disablekrb5kdcdns

Disable use of DNS to find Kerberos
KDCs

--enablekrb5realmdns

Enable use of DNS to find Kerberos
realms

--disablekrb5realmdns

Disable use of DNS to find Kerberos
realms

--enablesmbauth

Enable SMB

--disablesmbauth

Disable SMB

--smbworkgroup=<workgroup>

Specify SMB workgroup

--smbservers=<server>

Specify SMB servers

--enablewinbind

Enable winbind for user information
by default

--disablewinbind

Disable winbind for user information
by default

--enablewinbindauth

Enable winbindauth for authentication
by default

--disablewinbindauth

Disable winbindauth for
authentication by default

--smbsecurity=<user|server|domain|ads>

Security mode to use for Samba and
winbind

--smbrealm=<STRING>

Default realm for Samba and winbind
when security=ads

--smbidmapuid=<lowest-highest>

UID range winbind assigns to domain
or ADS users

--smbidmapgid=<lowest-highest>

GID range winbind assigns to domain
or ADS users

--winbindseparator=<\>

Character used to separate the domain
and user part of winbind usernames if
winbindusedefaultdomainis not
enabled

--winbindtemplatehomedir=</home/%D/%U>

Directory that winbind users have as
their home

--winbindtemplateprimarygroup=<nobody>

Group that winbind users have as their
primary group

--winbindtemplateshell=</bin/false>

Shell that winbind users have as their
default login shell

--enablewinbindusedefaultdomain

Configures winbind to assume that
users with no domain in their
usernames are domain users

228

Chapter 27. Authentication Configuration

Option

Description

--disablewinbindusedefaultdomain

Configures winbind to assume that
users with no domain in their
usernames are not domain users

--winbindjoin=<Administrator>

Joins the winbind domain or ADS
realm now as this administrator

--enablewins

Enable WINS for hostname resolution

--disablewins

Disable WINS for hostname
resolution

--enablehesiod

Enable Hesiod

--disablehesiod

Disable Hesiod

--hesiodlhs=<lhs>

Specify Hesiod LHS

--hesiodrhs=<rhs>

Specify Hesiod RHS

--enablecache

Enable nscd

--disablecache

Disable nscd

--nostart

Do not start or stop the portmap,
ypbind, or nscd services even if they
are configured

--kickstart

Do not display the user interface

--probe

Probe and display network defaults

Table 27-1. Command Line Options

You're Reading a Free Preview

Descarga
scribd
/*********** DO NOT ALTER ANYTHING BELOW THIS LINE ! ************/ var s_code=s.t();if(s_code)document.write(s_code)//-->