sys-auth/pambase: Change pam_sss handling for account stanza

Having this be effectively required isn't appropriate when we default to
having sssd be disabled.
This commit is contained in:
Matthew Garrett 2016-05-05 09:18:24 +01:00
parent 571317c3d3
commit 71b330e9d4
2 changed files with 1 additions and 1 deletions

View File

@ -15,7 +15,7 @@ diff -ur pambase-20140313.orig/system-auth.in pambase-20140313/system-auth.in
#endif #endif
account required pam_unix.so DEBUG account required pam_unix.so DEBUG
/* This is needed to make sure that the Kerberos skip-on-success won't cause a bad jump. */ /* This is needed to make sure that the Kerberos skip-on-success won't cause a bad jump. */
+account [default=bad success=ok user_unknown=ignore] pam_sss.so +account sufficient pam_sss.so
account optional pam_permit.so account optional pam_permit.so
#if HAVE_CRACKLIB #if HAVE_CRACKLIB