RHEL8 - When does AuthSelect Run?

Posted on

Authselect configures system authentication based on a profile, e.g. 'sssd'.
When it runs, it will alter two files, creating symlinks instead.

/etc/nsswitch.conf
/etc/pam.d/system-auth

BUT, it's not clear to me when this gets run, or who decides that it should run.
For example:
Workstation using 8.2; AuthSelect has been run (not by me).
Server using 8.2; AuthSelect has NOT been run.

I'm guessing one of the GUI components is running AuthSelect, but I don't know which one.

I also noticed that if AuthSelect has been run, it will affect system updates via DNF. glibc will refuse to update the newer version of /etc/nsswitch.conf because it's been altered by AuthSelect.

GH

Responses