Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to change pam.d/system_auth to help with password complexity as required by an audit.

I'm not familiar with PAM, but the system_auth file says

This file is auto generated User changes will be destroyed the next time authconfig is run.

Is there a proper way to edit permanent changes into system_auth rather than simply editing or am I misunderstanding the warning?

All I need to do is add some simple tally's and minlen, dcredit, ocredit, etc.

share|improve this question
up vote 3 down vote accepted

There's no reason you couldn't edit it directly. You just have to remember that if you run authconfig, your changes will likely be blown away. We certainly edit the file directly on all of our systems because authconfig isn't flexible enough for our tastes (and doesn't fit in well with the config management tools we use).

So, it's safe as long as you understand the constraints surrounding it's editing.

share|improve this answer
is there any reason that authconfig could be run by something else and nullify my changes? – Evan Jul 21 '09 at 20:07
Not that I'm aware of. system-config-authentication runs it on the backend I think (or atleast has the same functions provided to you in a gui form factor). – Travis Campbell Aug 3 '09 at 18:15

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.