#176 How to use authselect to configure pam in Fedora Linux
Closed: published by rlengland. Opened by w4tsn.

An article how the authselect tool works, how you create and maintain custom profiles and how to apply them.

I stumbled upon this topic in context of configuring pam to enable u2f smartcard support.

Sources:

  • https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html-single/configuring_authentication_and_authorization_in_rhel/index
  • https://alan.ivey.dev/posts/2019/yubikey-login-to-fedora-with-u2f-via-authselect/

Metadata Update from @rlengland:
- Issue assigned to w4tsn
- Issue tagged with: article, needs-image, needs-series

I'm going to approve this but the normal process is to pose your article topic and outline to the editors via the Fedora Magazine discussion board rather than opening a new Pagure ticket. Two of the editors then approve it and open and assign the ticket to you.

But I don't believe there is likely to be discussion on this, so it's yours.

Oh, I'm sorry. I didn't intent to be rude / violate the procedure. I'll keep it in mind for the future.

This article was just mentioned on card #177. Beware, however, that there seems to be a problem with the PAM stack configuration I suggested. I just tested adding those two lines to the system-auth file and, while it seems to work for authentication, it seems to break the crond service. With those lines in place, I'm seeing the following when I run crontab -l.

$ crontab -l                                                                                                                                                   
You (glb) are not allowed to access to (crontab) because of pam configuration.

And in the system log I'm seeing the following.

crontab[2909066]: (glb) PAM ERROR (The return value should be ignored by PAM dispatch)

I do not know why those lines are causing the crond service to fail.

@w4tsn Is this article still on your todo list?

Metadata Update from @w4tsn:
- Assignee reset

@rlengland no, I'm not currently pursuing this. I removed myself from the ticket.

Metadata Update from @mariowritescode:
- Issue assigned to mariowritescode

mariowritescode commented

@rlengland

Working on this

@mariowritescode Are you still working on this article?

@mariowritescode Can you give us a status update on this article, please?
Thank you.

mariowritescode commented

@rlengland . Will turn in a draft by Sunday 18/5. Working on it, right now.

@mariowritescode I see this article in the Fedora Magazine Wordpress instance.
https://fedoramagazine.org/?p=42172&preview=true

Please let us know when you feel it is ready for us to review by responding here.

Thank you!

mariowritescode commented

@rlengland Thank you.

It's ready for review.

Thanks again.

Metadata Update from @rlengland:
- Custom field preview-link adjusted to https://fedoramagazine.org/?p=42172&preview=true

Metadata Update from @rlengland:
- Custom field editor adjusted to rlengland
- Custom field image-editor adjusted to rlengland

@mariowritescode I've done an edit pass on your article. One paragraph was moved to the beginning of the article as a "teaser"/intro (it fit well there). Some other minor wording changes for clarity and removing passive voice but over all it looks pretty good.

I added a featured image as well. Hopefully it is appropriate.

Now would be a good time to do a final read through to make any further changes before we schedule it.

Thanks for you effort on this article.

Metadata Update from @rlengland:
- Issue untagged with: needs-image, needs-series

@mariowritescode Scheduled your article for 28 May 08:00 UTC.

Thank you, again, for your contribution.

mariowritescode commented

@rlengland , A thousand apologies, I caught this late.

I am setting up a system to ensure; my responses are timely in the future.

Issue status updated to: Closed (was: Open)
Issue close_status updated to: published

Metadata