mirror of
https://github.com/flatcar/scripts.git
synced 2025-08-24 16:01:09 +02:00
sys-auth/pambase: Change pam_sss handling for account stanza
Having this be effectively required isn't appropriate when we default to having sssd be disabled.
This commit is contained in:
parent
571317c3d3
commit
71b330e9d4
@ -15,7 +15,7 @@ diff -ur pambase-20140313.orig/system-auth.in pambase-20140313/system-auth.in
|
|||||||
#endif
|
#endif
|
||||||
account required pam_unix.so DEBUG
|
account required pam_unix.so DEBUG
|
||||||
/* This is needed to make sure that the Kerberos skip-on-success won't cause a bad jump. */
|
/* This is needed to make sure that the Kerberos skip-on-success won't cause a bad jump. */
|
||||||
+account [default=bad success=ok user_unknown=ignore] pam_sss.so
|
+account sufficient pam_sss.so
|
||||||
account optional pam_permit.so
|
account optional pam_permit.so
|
||||||
|
|
||||||
#if HAVE_CRACKLIB
|
#if HAVE_CRACKLIB
|
||||||
|
Loading…
x
Reference in New Issue
Block a user