authconfig - Command line tool for setting up authentication from network services

Property Value
Distribution Fedora 26
Repository Fedora x86_64
Package name authconfig
Package version 7.0.1
Package release 1.fc26
Package architecture x86_64
Package type rpm
Installed size 1.10 MB
Download size 225.82 KB
Official Mirror
Authconfig is a command line utility which can configure a workstation
to use shadow (more secure) passwords.  Authconfig can also configure a
system to be a client for certain networked user information and
authentication schemes.


Package Version Architecture Repository
authconfig-7.0.1-2.fc26.i686.rpm 7.0.1 i686 Fedora Updates
authconfig-7.0.1-2.fc26.x86_64.rpm 7.0.1 x86_64 Fedora Updates
authconfig-7.0.1-1.fc26.i686.rpm 7.0.1 i686 Fedora
authconfig - - -


Name Value
/usr/bin/openssl -
/usr/bin/python3 - -
libpwquality > 0.9 - -
pam >=
policycoreutils -
python(abi) = 3.6
python3 -
python3-sssdconfig -
rtld(GNU_HASH) -


Name Value
authconfig = 7.0.1-1.fc26
authconfig(x86-64) = 7.0.1-1.fc26
config(authconfig) = 7.0.1-1.fc26


Name Value
freeipa-client < 2.2.0
ipa-client < 2.2.0
nss_ldap < 254
pam_krb5 < 1.49
samba-client < 3.0
samba-common < 3.0
sssd < 1.15.1


Name Value
authconfig-gtk < 7.0.0


Type URL
Binary Package authconfig-7.0.1-1.fc26.x86_64.rpm
Source Package authconfig-7.0.1-1.fc26.src.rpm

Install Howto

Install the authconfig rpm package:

# dnf install authconfig




2017-05-16 - Tomáš Mráz <> - 7.0.1-1
- fix CVE-2017-7488 incorrect PAM configuration with SSSD (#1441604)
(if you use configuration with pam_sss, use authconfig --updateall
to fix the PAM configuration)
- support locking accounts after multiple authentication failures via
- enable SSSD smartcard support if module sssd is used
2017-02-27 - Tomáš Mráz <> - 7.0.0-1
- dropped authconfig-gtk (system-config-authentication) (no GTK3 support)
- dropped authconfig-tui (deprecated long ago)
- dropped IPA domain join support (conflicts with the recommended way to
install IPA client on a machine)
- dropped support for Hesiod, Wins, AFS, and other obsolete cruft
2015-02-20 - Tomáš Mráz <> - 6.2.10-1
- allow multiple LDAP URIs in the setting again
- winbind modules are now in samba-winbind package
- add support for keeping myhostname in nsswitch.conf hosts entry
- do not misinterpret comment for realm in krb5.conf
- warn about unsupported locale, do not bail out with exception
- python 3 compatibility for authconfig command line
2014-07-25 - Tomáš Mráz <> - 6.2.9-1
- support screensaver lock handling by GDM
- fix pam_pkcs11 options
- enable/disable/restart only services that are affected by the configuration
- do not overwrite special ldap base values
- display error message if winbind or IPA domain join fails
- fix invocation of IPA domain join from GUI
- translation updates
2013-11-01 - Tomáš Mráz <> - 6.2.8-1
- detect invalid LDAP uri and report error
- fix handling of IPA domain join errors and uninstall
- add support for winbind authentication over Kerberos 5
- set umask=077 by default for pam_mkhomedir and pam_oddjob_mkhomedir
- better error checking for password quality options
2013-08-23 - Tomáš Mráz <> - 6.2.7-1
- samba-winbind-clients package contains the nsswitch and pam modules (#919117)
- do not drop sss from nsswitch.conf on --update (#980861)
- writing out smartcard/fingerprint auth policy to dconf (original patch by
Ray Strode) (#990625)
- document other possible return codes from authconfig invocation (#991804)
- print error message if config file save fails (#994596)
- never stop rpcbind (#990788)
- do not disable sssd.service when --enablesssd is used (#953851)
- revert use_first_pass addition to pam_sss in password stack (#953116)
2013-03-28 - Tomáš Mráz <> - 6.2.6-1
- add use_first_pass to pam_sss in password stack
- more robust initialization of sssdConfig
- check whether base DN value is a real base DN
- use non-deprecated pam_pwquality option authtok_type= instead of type=
- update lastlog for su
2012-12-05 - Tomas Mraz <> - 6.2.5-1
- fix missing cache_credentials option when saving sssd.conf
- do not try to start/restart sssd with incomplete default domain
- add autofs to sssd.conf activated services
- add pam_winbind to session pam modules
2012-09-25 - Tomas Mraz <> - 6.2.4-1
- backup also passwd and friends when toggling enableshadow (#853074)
- use the new smb.conf idmap config range syntax (#850824)
- use local_users_only with pam_pwquality (#849072)
- enable the authlogin_nsswitch_use_ldap SELinux boolean when enabling LDAP (#846084)
- preserve the value of cache_credentials in sssd.conf
- do not fail PAM session if pam_lastlog module fails
- use sssd also for automount map (#847823)
- enable deferred_kinit if cache_credentials is enabled (#814384)
2012-07-19 - Tomas Mraz <> - 6.2.3-1
- fix missing linkage to libresolv
- add missing requires of openssl binary for cacertdir_rehash
- install missing packages via PackageKit (original patch by Stef Walter)
- add pam_lastlog to postlogin PAM configuration to display failed login
- enable the allow_ypbind SELinux boolean when enabling NIS
- try to preserve the dns_lookup_kdc and dns_lookup_realm settings
- do not use cached_login in password stack for pam_winbind

See Also

Package Description
authd-1.4.3-46.fc26.x86_64.rpm A RFC 1413 ident protocol daemon
auto-1.1-4.fc26.noarch.rpm A collection of source code generators for Java
auto-buildrequires-1.2-3.fc26.x86_64.rpm Work out BuildRequires for rpmbuild automatically
auto-common-1.1-4.fc26.noarch.rpm Auto Common Utilities
auto-destdir-1.11-11.fc26.noarch.rpm Automate DESTDIR support for "make install"
auto-factory-1.1-4.fc26.noarch.rpm JSR-330-compatible factories
auto-javadoc-1.1-4.fc26.noarch.rpm Javadoc for auto
auto-service-1.1-4.fc26.noarch.rpm Provider-configuration files for ServiceLoader
auto-value-1.1-4.fc26.noarch.rpm Auto Value
autoarchive-1.3.0-2.fc26.noarch.rpm A simple backup tool that uses tar
autocloud-backend-0.7.1-2.fc26.noarch.rpm Autocloud backend
autocloud-common-0.7.1-2.fc26.noarch.rpm Autocloud common library
autocloud-web-0.7.1-2.fc26.noarch.rpm A REST API server on top of statscache
autoconf-2.69-24.fc26.noarch.rpm A GNU tool for automatically configuring source code
autoconf-archive-2017.03.21-1.fc26.noarch.rpm The Autoconf Macro Archive