Authselect: Remove NIS Profile
This is a proposed Change for Fedora Linux.
This document represents a proposed Change. As part of the Changes process, proposals are publicly announced in order to receive community feedback. This proposal will only be implemented if approved by the Fedora Engineering Steering Committee.
Summary
Authselect currently ships four profiles local, sssd, winbind and nis. This change suggest removing the nis profile from authselect - it will no longer be possible to configure nsswitch.conf for NIS with authselect using “authselect select nis” but NIS will still be available on the system and users will be able to configure their nsswitch.conf to use NIS with custom authselect profile or manually.
Owner
- Name: Pavel Březina
- Email: pbrezina@redhat.com
Detailed Description
This change will remove the authselect nis profile from the list of shipped profiles. User’s will no longer be able to choose this profile to configure their nsswitch.conf for NIS support. They will need to do it manually or with a custom authselect profile.
Feedback
No feedback.
Benefit to Fedora
NIS is an old, outdated technology. This change does not strip NIS support from the system, only from authselect profiles. Vast majority of the Fedora users should not be affected and user’s that still require NIS will still be able to use it. Reducing number of profiles will make authselect maintenance easier.
Scope
-
Proposal owners: Remove NIS profile from authselect RPM and from authselect upstream.
-
Other developers: None.
-
Release engineering: None. #Releng issue number
-
Policies and guidelines: N/A (not needed for this Change)
-
Trademark approval: N/A (not needed for this Change)
-
Alignment with the Fedora Strategy:
Upgrade/compatibility impact
User’s that have the nis profile selected will still have the system configured correctly after upgrade. But “authselect check” will report issues.
Early Testing (Optional)
Do you require ‘QA Blueprint’ support? N
How To Test
check that authselect list no longer shows nis
User Experience
Authselect nis profile is no longer available.
Dependencies
None
Contingency Plan
Revert changes if needed.
- Contingency mechanism: (What to do? Who will do it?) N/A (not a System Wide Change)
- Contingency deadline: N/A (not a System Wide Change)
- Blocks release? N/A (not a System Wide Change), Yes/No
Documentation
N/A (not a System Wide Change)
Release Notes
The “nis” authselect profile was removed. If you use this profile, make sure to create and select a custom authselect profile that will enable nis support on your system or opt-out from authselect with “authselect opt-out”, keeping the current configuration intact.
Last edited by @amoloney 2026-07-20T14:18:29Z
Last edited by @amoloney 2026-07-20T14:18:29Z
instead of reiterating. You can even do this by email, by replying with the heart emoji or just “+1”. This will make long topics easier to follow.