blob: e8a6d914fc96b8968e27401d28fa9f3404e36b4c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
|
auth required pam_env.so {{ debug|default('', true) }}
{% if pam_ssh -%}
auth sufficient pam_ssh.so
{% endif -%}
{% if krb5 -%}
auth [success=1 default=ignore] pam_krb5.so {{ krb5_params }}
{% endif -%}
auth required pam_unix.so try_first_pass {{ likeauth }} {{ nullok|default('', true) }} {{ debug|default('', true) }}
auth optional pam_permit.so
{% if not minimal -%}
auth required pam_faillock.so preauth silent audit deny=3 unlock_time=600
auth sufficient pam_unix.so {{ nullok|default('', true) }} try_first_pass
auth [default=die] pam_faillock.so authfail audit deny=3 unlock_time=600
{% endif -%}
{% if krb5 -%}
account [success=1 default=ignore] pam_krb5.so {{ krb5_params }}
{% endif -%}
account required pam_unix.so {{ debug|default('', true) }}
account optional pam_permit.so
{% if not minimal -%}
account required pam_faillock.so
{% endif -%}
{% if passwdqc -%}
password required pam_passwdqc.so min=8,8,8,8,8 retry=3
{% endif -%}
{% if krb5 -%}
password [success=1 default=ignore] pam_krb5.so {{ krb5_params }}
{% endif -%}
password required pam_unix.so try_first_pass {{ unix_authtok|default('', true) }} {{ nullok|default('', true) }} {{ unix_extended_encryption|default('', true) }} {{ debug|default('', true) }}
password optional pam_permit.so
{%- if pam_ssh %}
session optional pam_ssh.so
{% endif -%}
{% if systemd -%}
-session optional pam_systemd.so
{% endif -%}
{% if elogind -%}
-session optional pam_elogind.so
{% endif -%}
{% if libcap -%}
-session optional pam_libcap.so
{% endif -%}
{% include "templates/system-session.tpl" %}
|
GitWeb
