tune_sssd.sh: add AlterOS, fix --skip-installed, conditional authconfig

dc-client/tune_sssd.sh

@@ -41,8 +41,8 @@ case $(epm print info -d) in
         epmi --skip-installed krb5-kinit ldb-tools sssd-ad samba-common-tools samba-common-client samba-common bind-utils
         # pam_mount task-auth-ad-sssd
         ;;
-    Fedora|RedOS|GosLinux|CentOS|RHEL|ROSA)
-        epmi --skip installed krb5-workstation ldb-tools sssd-ad samba-common-tools authselect
+    AlterOS|Fedora|RedOS|GosLinux|CentOS|RHEL|ROSA)
+        epmi --skip-installed krb5-workstation ldb-tools sssd-ad samba-common-tools authselect
         ;;
     *)
         fatal "Unsupported distro $(epm print info -d)"
@@ -234,11 +234,12 @@ case $(epm print info -d) in
         epm assure rolelst libnss-role
         roleadd etersysadmin wheel
         ;;
-    Fedora|RedOS|GosLinux|CentOS|RHEL|ROSA)
+    AlterOS|Fedora|RedOS|GosLinux|CentOS|RHEL|ROSA)
         # echo "Check the script for autoselect"
         authselect select sssd --force
         authselect apply-changes
-        authconfig --enablemkhomedir
+        # authconfig is absent on el8+/AlterOS; skip (mkhomedir not needed with NFS homes)
+        command -v authconfig >/dev/null && authconfig --enablemkhomedir
         ;;
     Debian|Ubuntu|AstraLinux*)
         pam-auth-update --package