Identity Management and Authentication
The following identity management and authentication features and functionalities are deprecated in Oracle Linux 9.
PAM Console
pam_console module is deprecated. It grants file permissions and
authentication to users logged in at the physical console or terminals, and adjusts
these privileges based on console login status and user presence.
BDB backend (in 389-ds-base)
Berkeley Database (BDB) backend is deprecated in 389-ds-base package,
the 389 Directory Server. As a replacement, Directory Server can now create instances
with Lightning Memory-Mapped Database (LMDB) available as a Technology Preview.
sss_ssh_knownhostsproxy
sss_ssh_knownhostsproxy, a utility in the System Security Services
Daemon (SSSD) package, is deprecated.
SSSD Files Provider
The SSSD files provider, which retrieves user information from local
files such as /etc/shadow and group information from
/etc/groups, is deprecated and disabled by default in Oracle Linux
9.
To retrieve user and group information from local files with SSSD:
-
Configure SSSD. Choose one of the following options:
-
Explicitly configure a local domain with the
id_provider=filesoption in thesssd.confconfiguration file.[domain/local] id_provider=files ... -
Enable the
filesprovider by settingenable_files_domain=truein thesssd.confconfiguration file.[sssd] enable_files_domain = true
-
-
Configure the name services switch.
sudo authselect enable-feature with-files-provider
OpenLDAP Utility Options
The OpenLDAP project has deprecated the -h and -p options
in its utilities, and recommends using the -H option instead to specify the
LDAP URI.