authconfig

Show current configuration

$ authconfig --test

$ authconfig --update --passalgo=sha512

$ authconfig --update --enableldapauth

$ authconfig --update --disableldapauth

$ authconfig --update --enablenis

$ authconfig --update --enablekrb5

$ authconfig --update --enablewinbindauth

$ authconfig --update --enablelocauthorize

authconfig [OPTIONS]

authconfig configures system authentication resources on Red Hat-based Linux distributions. It manages PAM stack configuration, nsswitch.conf settings, and related authentication files to enable or disable mechanisms including LDAP, NIS, Kerberos, Winbind, and local authentication.
The tool modifies system files to integrate centralized identity providers with the local authentication stack. Use --test to inspect the current configuration before making changes with --update.

--test

Display the current configuration without making changes

Apply configuration changes

Set password hashing algorithm (sha256, sha512)

Enable LDAP authentication

Disable LDAP authentication

Enable Network Information Service

Enable Kerberos 5 authentication

Enable Winbind (Active Directory) authentication

Enable local authorization

Enable shadow password file

/etc/sysconfig/authconfig

Stores the current authconfig settings as key-value pairs.

PAM configuration directory modified by authconfig to enable authentication modules.

Name service switch configuration, updated to reflect identity source changes.

This tool is specific to Red Hat-based distributions (RHEL, CentOS, Fedora). It has been deprecated in favor of authselect on newer systems. Changes require root privileges.

authconfig was the standard authentication configuration tool for Red Hat Enterprise Linux and related distributions before being replaced by authselect.

authselect(8), pam(8)