2.2. authselect 프로파일 선택

검증

1. SSSD의 sss 항목이 /etc/nsswitch.conf 에 있는지 확인합니다.

   passwd:     sss files
   group:      sss files
   netgroup:   sss files
   automount:  sss files
   services:   sss files
   ...

2. pam _ss.so 항목의 /etc/pam.d/system-auth 파일의 내용을 검토합니다.

   # Do not modify this file manually, use authselect instead. Any user changes will be overwritten.
   # You can stop authselect from managing your configuration by calling 'authselect opt-out'.
   # See authselect(8) for more details.
   
   auth        required        pam_env.so
   auth        required        pam_faildelay.so delay=2000000
   auth        [default=1 ignore=ignore success=ok]    pam_succeed_if.so uid >= 1000 quiet
   auth        [default=1 ignore=ignore success=ok]    pam_localuser.so
   auth        sufficient      pam_unix.so nullok try_first_pass
   auth        requisite       pam_succeed_if.so uid >= 1000 quiet_success
   auth        sufficient      pam_sss.so forward_pass
   auth        required        pam_deny.so
   
   account     required        pam_unix.so
   account     sufficient      pam_localuser.so
   ...