Enable NIS for system authentication
====================================

Selecting this profile will enable Network Information Services as the source
of identity and authentication providers.

NIS CONFIGURATION
-----------------

Authselect does not touch NIS configuration. Please, read NIS' documentation
to see how to configure it manually.

AVAILABLE OPTIONAL FEATURES
---------------------------

with-faillock::
    Enable account locking in case of too many consecutive
    authentication failures.

with-mkhomedir::
    Enable automatic creation of home directories for users on their
    first login.

with-ecryptfs::
    Enable automatic per-user ecryptfs.

with-fingerprint::
    Enable authentication with fingerprint reader through *pam_fprintd*.

with-pam-gnome-keyring::
    Enable pam-gnome-keyring support.

with-pam-u2f::
    Enable authentication via u2f dongle through *pam_u2f*.

with-pam-u2f-2fa::
    Enable 2nd factor authentication via u2f dongle through *pam_u2f*.

without-pam-u2f-nouserok::
    Module argument nouserok is omitted if also with-pam-u2f-2fa is used.
    *WARNING*: Omitting nouserok argument means that users without pam-u2f
    authentication configured will not be able to log in *INCLUDING* root.
    Make sure you are able to log in before losing root privileges.

with-silent-lastlog::
    Do not produce pam_lastlog message during login.

without-lastlog-showfailed::
    Do not print number of failed login attempts during login.

with-pamaccess::
    Check access.conf during account authorization.

with-pwhistory::
    Enable pam_pwhistory module for local users.

with-nispwquality::
    If this option is set pam_pwquality module will check password quality
    for NIS users as well as local users during password change. Without this
    option only local users passwords are checked.

with-altfiles::
    Use nss_altfiles for passwd and group nsswitch databases.

with-mdns4::
    Enable multicast DNS over IPv4.

with-mdns6::
    Enable multicast DNS over IPv6.

with-systemd-homed::
    If set, pam_systemd_homed is enabled for all pam operations.

without-nullok::
    Do not add nullok parameter to pam_unix.

with-libvirt::
    Enable connecting to libvirt VMs using the hostname configured in the
    guest OS or, as a fallback, their name.

EXAMPLES
--------
* Enable NIS with no additional modules

  authselect select nis

* Enable NIS and create home directories for users on their first login

  authselect select nis with-mkhomedir