Command Line Version - Red Hat ENTERPRISE LINUX 4 System Administration Manual

Chapter 26. Authentication Configuration
• Use Shadow Passwords — Select this option to store passwords in shadow password format in
the /etc/shadow file instead of /etc/passwd. Shadow passwords are enabled by default during
installation and are highly recommended to increase the security of the system.
The shadow-utils package must be installed for this option to work. For more information about
shadow passwords, refer to the Users and Groups chapter in the Reference Guide.
• Enable SMB Support — This option configures PAM to use an SMB server to authenticate users.
Click the Configure SMB button to specify:
• Workgroup — Specify the SMB workgroup to use.
• Domain Controllers — Specify the SMB domain controllers to use.
• Winbind — Select this option to configure the system to connect to a Windows Active Directory or
a Windows domain controller. User information can be accessed, as well as server authentication
options can be configured.
• Use MD5 Passwords — Select this option to enable MD5 passwords, which allows passwords
to be up to 256 characters instead of eight characters or less. It is selected by default during
installation and is highly recommended for increased security.

26.3. Command Line Version

The Authentication Configuration Tool can also be run as a command line tool with no
interface. The command line version can be used in a configuration script or a kickstart script. The
authentication options are summarized in
Tip
These options can also be found in the authconfig man page or by typing authconfig
--help at a shell prompt.
Option
--enableshadow
--disableshadow
--enablemd5
--disablemd5
--enablenis
--disablenis
--nisdomain=<domain>
--nisserver=<server>
--enableldap
--disableldap
--enableldaptls
--disableldaptls
--enableldapauth
268
Table 26.1, "Command Line
Description
Enable shadow passwords
Disable shadow passwords
Enable MD5 passwords
Disable MD5 passwords
Enable NIS
Disable NIS
Specify NIS domain
Specify NIS server
Enable LDAP for user information
Disable LDAP for user information
Enable use of TLS with LDAP
Disable use of TLS with LDAP
Enable LDAP for authentication
Options".