2.2. 选择一个 authselect 配置文件

验证

1. 验证 /etc/nsswitch.conf 中是否存在 SSSD 的 sss 条目：

   passwd:     sss files
   group:      sss files
   netgroup:   sss files
   automount:  sss files
   services:   sss files
   ...

2. 在 pam_sss.so 条目中查看 /etc/pam.d/system-auth 文件的内容：

   # Do not modify this file manually, use authselect instead. Any user changes will be overwritten.
   # You can stop authselect from managing your configuration by calling 'authselect opt-out'.
   # See authselect(8) for more details.
   
   auth        required        pam_env.so
   auth        required        pam_faildelay.so delay=2000000
   auth        [default=1 ignore=ignore success=ok]    pam_succeed_if.so uid >= 1000 quiet
   auth        [default=1 ignore=ignore success=ok]    pam_localuser.so
   auth        sufficient      pam_unix.so nullok try_first_pass
   auth        requisite       pam_succeed_if.so uid >= 1000 quiet_success
   auth        sufficient      pam_sss.so forward_pass
   auth        required        pam_deny.so
   
   account     required        pam_unix.so
   account     sufficient      pam_localuser.so
   ...