1. [root@riyimei ~]# authconfig
    2. Usage: authconfig [options] {--update|--updateall|--test|--probe|--restorebackup <name>|--savebackup <name>|--restorelastbackup}
    4. Options:
    5.     -h, --help              show this help message and exit
    6.   --enableshadow, --useshadow
    7.                         enable shadowed passwords by default
    8.     --disableshadow         disable shadowed passwords by default
    9.   --enablemd5, --usemd5
    10.                         enable MD5 passwords by default
    11.     --disablemd5            disable MD5 passwords by default
    12.   --passalgo=<descrypt|bigcrypt|md5|sha256|sha512>
    13.                         hash/crypt algorithm for new passwords
    14.     --enablenis             enable NIS for user information by default
    15.     --disablenis            disable NIS for user information by default
    16.     --nisdomain=<domain>    default NIS domain
    17.     --nisserver=<server>    default NIS server
    18.     --enableldap            enable LDAP for user information by default
    19.     --disableldap           disable LDAP for user information by default
    20.     --enableldapauth        enable LDAP for authentication by default
    21.     --disableldapauth       disable LDAP for authentication by default
    22.   --ldapserver=<server>
    23.                         default LDAP server hostname or URI
    24.     --ldapbasedn=<dn>       default LDAP base DN
    25.   --enableldaptls, --enableldapstarttls
    26.                         enable use of TLS with LDAP (RFC-2830)
    27.   --disableldaptls, --disableldapstarttls
    28.                         disable use of TLS with LDAP (RFC-2830)
    29.     --enablerfc2307bis      enable use of RFC-2307bis schema for LDAP user information lookups
    30.     --disablerfc2307bis     disable use of RFC-2307bis schema for LDAP user information lookups
    31.   --ldaploadcacert=<URL>
    32.                         load CA certificate from the URL
    33.     --enablesmartcard       enable authentication with smart card by default
    34.     --disablesmartcard      disable authentication with smart card by default
    35.   --enablerequiresmartcard
    36.                         require smart card for authentication by default
    37.   --disablerequiresmartcard
    38.                         do not require smart card for authentication by default
    39.   --smartcardmodule=<module>
    40.                         default smart card module to use
    41.   --smartcardaction=<0=Lock|1=Ignore>
    42.                         action to be taken on smart card removal
    43.     --enablefingerprint     enable authentication with fingerprint readers by default
    44.     --disablefingerprint    disable authentication with fingerprint readers by default
    45.     --enableecryptfs        enable automatic per-user ecryptfs
    46.     --disableecryptfs       disable automatic per-user ecryptfs
    47.     --enablekrb5            enable kerberos authentication by default
    48.     --disablekrb5           disable kerberos authentication by default
    49.     --krb5kdc=<server>      default kerberos KDC
    50.   --krb5adminserver=<server>
    51.                         default kerberos admin server
    52.     --krb5realm=<realm>     default kerberos realm
    53.     --enablekrb5kdcdns      enable use of DNS to find kerberos KDCs
    54.     --disablekrb5kdcdns     disable use of DNS to find kerberos KDCs
    55.     --enablekrb5realmdns    enable use of DNS to find kerberos realms
    56.   --disablekrb5realmdns
    57.                         disable use of DNS to find kerberos realms
    58.     --enablewinbind         enable winbind for user information by default
    59.     --disablewinbind        disable winbind for user information by default
    60.     --enablewinbindauth     enable winbind for authentication by default
    61.     --disablewinbindauth    disable winbind for authentication by default
    62.   --smbsecurity=<user|server|domain|ads>
    63.                         security mode to use for samba and winbind
    64.     --smbrealm=<realm>      default realm for samba and winbind when security=ads
    65.   --smbservers=<servers>
    66.                         names of servers to authenticate against
    67.   --smbworkgroup=<workgroup>
    68.                         workgroup authentication servers are in
    69.   --smbidmaprange=<lowest-highest>, --smbidmapuid=<lowest-highest>, --smbidmapgid=<lowest-highest>
    70.                         uid range winbind will assign to domain or ads users
    71.   --winbindseparator=<\>
    72.                         the character which will be used to separate the domain and user part of winbind-created user names if winbindusedefaultdomain is not enabled
    73.   --winbindtemplatehomedir=</home/%D/%U>
    74.                         the directory which winbind-created users will have as home directories
    75.   --winbindtemplateshell=</bin/false>
    76.                         the shell which winbind-created users will have as their login shell
    77.   --enablewinbindusedefaultdomain
    78.                         configures winbind to assume that users with no domain in their user names are domain users
    79.   --disablewinbindusedefaultdomain
    80.                         configures winbind to assume that users with no domain in their user names are not domain users
    81.   --enablewinbindoffline
    82.                         configures winbind to allow offline login
    83.   --disablewinbindoffline
    84.                         configures winbind to prevent offline login
    85.     --enablewinbindkrb5     winbind will use Kerberos 5 to authenticate
    86.     --disablewinbindkrb5    winbind will use the default authentication method
    87.   --winbindjoin=<Administrator>
    88.                         join the winbind domain or ads realm now as this administrator
    89.     --enableipav2           enable IPAv2 for user information and authentication by default
    90.     --disableipav2          disable IPAv2 for user information and authentication by default
    91.   --ipav2domain=<domain>
    92.                         the IPAv2 domain the system should be part of
    93.     --ipav2realm=<realm>    the realm for the IPAv2 domain
    94.   --ipav2server=<servers>
    95.                         the server for the IPAv2 domain
    96.     --enableipav2nontp      do not setup the NTP against the IPAv2 domain
    97.     --disableipav2nontp     setup the NTP against the IPAv2 domain (default)
    98.   --ipav2join=<account>
    99.                         join the IPAv2 domain as this account
    100.     --enablewins            enable wins for hostname resolution
    101.     --disablewins           disable wins for hostname resolution
    102.     --enablepreferdns       prefer dns over wins or nis for hostname resolution
    103.     --disablepreferdns      do not prefer dns over wins or nis for hostname resolution
    104.     --enablehesiod          enable hesiod for user information by default
    105.     --disablehesiod         disable hesiod for user information by default
    106.     --hesiodlhs=<lhs>       default hesiod LHS
    107.     --hesiodrhs=<rhs>       default hesiod RHS
    108.     --enablesssd            enable SSSD for user information by default with manually managed configuration
    109.     --disablesssd           disable SSSD for user information by default (still used for supported configurations)
    110.     --enablesssdauth        enable SSSD for authentication by default with manually managed configuration
    111.     --disablesssdauth       disable SSSD for authentication by default (still used for supported configurations)
    112.     --enableforcelegacy     never use SSSD implicitly even for supported configurations
    113.     --disableforcelegacy    use SSSD implicitly if it supports the configuration
    114.     --enablecachecreds      enable caching of user credentials in SSSD by default
    115.     --disablecachecreds     disable caching of user credentials in SSSD by default
    116.     --enablecache           enable caching of user information by default (automatically disabled when SSSD is used)
    117.     --disablecache          disable caching of user information by default
    118.     --enablelocauthorize    local authorization is sufficient for local users
    119.   --disablelocauthorize
    120.                         authorize local users also through remote service
    121.     --enablepamaccess       check access.conf during account authorization
    122.     --disablepamaccess      do not check access.conf during account authorization
    123.     --enablesysnetauth      authenticate system accounts by network services
    124.     --disablesysnetauth     authenticate system accounts by local files only
    125.     --enablemkhomedir       create home directories for users on their first login
    126.     --disablemkhomedir      do not create home directories for users on their first login
    127.   --passminlen=<number>
    128.                         minimum length of a password
    129.   --passminclass=<number>
    130.                         minimum number of character classes in a password
    131.   --passmaxrepeat=<number>
    132.                         maximum number of same consecutive characters in a password
    133.   --passmaxclassrepeat=<number>
    134.                         maximum number of consecutive characters of same class in a password
    135.     --enablereqlower        require at least one lowercase character in a password
    136.     --disablereqlower       do not require lowercase characters in a password
    137.     --enablerequpper        require at least one uppercase character in a password
    138.     --disablerequpper       do not require uppercase characters in a password
    139.     --enablereqdigit        require at least one digit in a password
    140.     --disablereqdigit       do not require digits in a password
    141.     --enablereqother        require at least one other character in a password
    142.     --disablereqother       do not require other characters in a password
    143.     --enablefaillock        enable account locking in case of too many consecutive authentication failures
    144.     --disablefaillock       disable account locking on too many consecutive authentication failures
    145.   --faillockargs=<options>
    146.                         the pam_faillock module options
    147.     --nostart               do not start/stop portmap, ypbind, and nscd
    148.     --test                  do not update the configuration files, only print new settings
    149.   --update, --kickstart
    150.                         opposite of --test, update configuration files with changed settings
    151.     --updateall             update all configuration files
    152.     --probe                 probe network for defaults and print them
    153.     --savebackup=<name>     save a backup of all configuration files
    154.   --restorebackup=<name>
    155.                         restore the backup of configuration files
    156.     --restorelastbackup     restore the backup of configuration files saved before the previous configuration change
    157. [root@riyimei ~]#