Identity Management and Authentication
The following identity management and authentication features and functionalities are deprecated in Oracle Linux 9.
PAM Console
pam_console
module is deprecated. It grants file permissions and
authentication to users logged in at the physical console or terminals, and adjusts
these privileges based on console login status and user presence.
BDB backend (in 389-ds-base)
Berkeley Database (BDB) backend is deprecated in 389-ds-base
package,
the 389 Directory Server. As a replacement, Directory Server can now create instances
with Lightning Memory-Mapped Database (LMDB) available as a Technology Preview.
sss_ssh_knownhostsproxy
sss_ssh_knownhostsproxy
, a utility in the System Security Services
Daemon (SSSD) package, is deprecated.
SSSD Files Provider
The SSSD files
provider, which retrieves user information from local
files such as /etc/shadow
and group information from
/etc/groups
, is deprecated and disabled by default in Oracle Linux
9.
To retrieve user and group information from local files with SSSD:
-
Configure SSSD. Choose one of the following options:
-
Explicitly configure a local domain with the
id_provider=files
option in thesssd.conf
configuration file.[domain/local] id_provider=files ...
-
Enable the
files
provider by settingenable_files_domain=true
in thesssd.conf
configuration file.[sssd] enable_files_domain = true
-
-
Configure the name services switch.
sudo authselect enable-feature with-files-provider
OpenLDAP Utility Options
The OpenLDAP project has deprecated the -h
and -p
options
in its utilities, and recommends using the -H
option instead to specify the
LDAP URI.