Changes in PAM, NSS and SDDM (default) configuration compared to openSUSE Leap 42.3?


I have recently upgraded from openSUSE Leap 42.3 (x86_64) to openSUSE Leap 15.1 (x86_64) following the instructions from the Wiki page. Using rpmcheckconfig I was able to merge the changes for most of the affected configuration files (mainly since I was able to find documentation online referring to the settings added or deleted from the configuration files providing reasoning as to why that happened) but I need help with four configuration files relating to PAM, NSS and SDDM:

In /etc/nsswitch.conf the row “shadow: compat” was added and the source “mdns_minimal [NOTFOUND=return]” was removed from the “hosts” database entry. The latter seems expected since the manpage does not list the mdns_minimal source anymore, but what about the compatibility setting for the “shadow” database? I also noticed that the source “nis” was removed from the “negroup” and “automount” databases. Is this to be expected?

In /etc/pam.d/common-account the line “account required” was added. This seems to be OK, as its only effect should be that it mandates that the user to be authorized is present in the /etc/passwd file, correct? (At least for as long as I don’t witness any authentication related problems…)

In /etc/pam.d/common-password the “shadow” option was removed from the “password required” entry. This seems unexpected, since most guides seem to suggest that this option should be set. Have I missed something? Does this somehow relate to the addition of “shadow: compat” in nsswitch.conf?

In /etc/sddm.conf the keys (and corresponding values) Current and CursorTheme in section [Theme] and “ServerPath”, “SessionCommand”, “DisplayCommand”, “MinimumVT” in section [XDisplay] were removed. I am assuming that I can do without those settings as long as no visible artifacts in the GUI rendering are visible?

Thanks in advance for any help!

Kind regards