authselect

Manage authselect profile on systems that support it.

This module does not create custom profiles or deploy them. For consistency, you are advised to package them up and then deploy that package rather than build them ad-hoc.

Table of Contents

1. Description
2. Setup - The basics of getting started with authselect
   • What authselect affects
   • Setup requirements
3. Usage - Configuration options and additional functionality
4. Limitations - OS compatibility, etc.
5. Development - Guide for contributing to the module

Description

Set your authselect profile and any required features.

Setup

What authselect affects

This will alter your host's fundemental authentication and lookups via authselect. Understand what that means before using it.

Setup Requirements

You will need to start any required services BEFORE the authselect class runs.

This class does not track things like sssd or winbind services.

Usage

Example class invocation:

class { 'authselect':
  profile => 'sssd',
  profile_options => [ 'with-mkhomedir', 'with-faillock']
}

And the Hiera file would look like:

authselect::profile: sssd
authselect::profile_options:
  - with-mkhomedir
  - without-pam-u2f-nouserok

This class also provides two facts: authselect_profile and authselect_profile_features.

Limitations

This class does not have methods for deploying or generating custom profiles.

Development

Folks should use the repo listed in metadata.json.