Identity & Auth
28 articles
Configure SSH key authentication
Generate an SSH key pair, copy the public key to your server, and set secure file permissions to enable passwordless login.
Encrypt home directory
The recommended way to encrypt your home directory on Fedora is to enable full-disk LUKS encryption during installation; for an existing system, fscrypt can encrypt specific directories without reinstalling.
How to Add a User to the sudo (wheel) Group on Fedora
Add a user to the sudo wheel group on Fedora using the usermod command to enable administrative privileges.
How to Change a User's Password on Fedora
Change a Fedora user password instantly using the passwd command with sudo for other users or alone for yourself.
How to Configure 802.1X Network Authentication on Fedora
Configure 802.1X on Fedora by using `nmcli` to create a connection profile with the EAP method, username, and certificate details, then activate it via NetworkManager.
How to Configure LDAP Authentication on Fedora
Connect Fedora to an LDAP directory for centralized user authentication by installing SSSD, pointing it at your LDAP server, and enabling the PAM and NSS integration.
How to Configure PAM (Pluggable Authentication Modules) on Fedora
PAM on Fedora is configured through service-specific files in /etc/pam.d/, where each file defines an ordered stack of modules controlling authentication, account, session, and password management.
How to Configure Polkit (PolicyKit) Permissions on Fedora
Configure Polkit permissions on Fedora by creating a custom XML policy file in /usr/share/polkit-1/actions/ and restarting the polkit service.
How to Configure SSH Key-Based Authentication on Fedora
Configure SSH key-based authentication on Fedora by generating keys, setting permissions, and restarting the SSH daemon.
How to Configure sudo Access and Sudoers File on Fedora
Grant sudo access on Fedora by adding your user to the wheel group and verifying the sudoers configuration.
How to Create and Delete Users on Fedora (useradd, userdel)
Use `useradd` to create new accounts and `userdel` to remove them, ensuring you handle home directories and group memberships explicitly to avoid permission issues.
How to Disable SSH Password Authentication on Fedora
Disable SSH password authentication on Fedora by setting PasswordAuthentication to no in /etc/ssh/sshd_config and restarting the sshd service.
How to Encrypt Your Home Directory on Fedora
Create a new Fedora user with the --encrypt flag to automatically encrypt their home directory using LUKS.
How to Fix "User Is Not in the Sudoers File" Error on Fedora
The error occurs because your user account lacks explicit sudo privileges in the `/etc/sudoers` file or the `/etc/sudoers.d/` directory.
How to Install and Configure KeePassXC Password Manager on Fedora
Install KeePassXC directly from the official Fedora repositories using `dnf`, then configure your firewall and SELinux contexts if you plan to access network shares or custom database locations.
How to Join a Fedora Machine to Active Directory
To join a Fedora machine to Active Directory, install the SSSD and realmd packages, then use the `realm` command to discover and join the domain while configuring SSSD for user authentication.
How to Lock and Unlock User Accounts on Fedora
Lock and unlock Fedora user accounts instantly using the usermod command with the -L and -U flags.
How to Manage Groups on Fedora (groupadd, groupdel, usermod)
Create, delete, and manage user groups on Fedora using groupadd, groupdel, and usermod commands.
How to Reset a Forgotten Root or User Password on Fedora
Reset a forgotten Fedora root or user password by booting into single-user mode, chrooting to the system, and running the passwd command.
How to Set Password Expiration Policies on Fedora
Set Fedora password expiration by editing /etc/login.defs and applying settings with chage command.
How to Set Up FreeIPA for Identity Management on Fedora
Install the freeipa-server package and run ipa-install to configure your Fedora identity management server.
How to Set Up FreeIPA Server on Fedora for Identity Management
Install the ipa-server package and run ipa-server-install to configure your central identity management domain on Fedora.
How to Set Up SSH Key-Based Authentication on Fedora
Set up SSH key-based authentication on Fedora by generating keys, copying the public key to the server, and restarting the SSH service.
How to Set Up Two-Factor Authentication (2FA) for SSH on Fedora
You can add TOTP-based two-factor authentication to SSH on Fedora by installing Google Authenticator's PAM module, configuring PAM, and updating sshd_config.
How to Switch Between Users on Fedora (su and sudo)
Use `sudo -i` to start a new root shell with the full root environment, or `su -` to switch to another user while loading their profile settings.
How to Use Access Control Lists (ACLs) on Fedora
You can manage Access Control Lists (ACLs) on Fedora using the `setfacl` and `getfacl` commands to grant specific users or groups permissions beyond standard Unix ownership, provided your filesystem is mounted with ACL support.
Reset root password
You can reset a forgotten root password on Fedora by booting into an emergency shell via the GRUB menu and running the passwd command from a chroot environment.
Set up two-factor authentication
Fedora supports TOTP-based two-factor authentication for local logins and SSH through the PAM Google Authenticator module.