mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-12-22 08:53:41 +01:00
c3d7aa730d
than duplicate it. This requires OpenPAM Dianthus, which was committed two weeks ago; installing these files on a system running a world older than June 1st, 2003 will cause login(1) and su(1) to fail.
26 lines
638 B
Plaintext
26 lines
638 B
Plaintext
#
|
|
# $FreeBSD$
|
|
#
|
|
# System-wide defaults
|
|
#
|
|
|
|
# auth
|
|
auth sufficient pam_opie.so no_warn no_fake_prompts
|
|
auth requisite pam_opieaccess.so no_warn allow_local
|
|
#auth sufficient pam_krb5.so no_warn try_first_pass
|
|
#auth sufficient pam_ssh.so no_warn try_first_pass
|
|
auth required pam_unix.so no_warn try_first_pass nullok
|
|
|
|
# account
|
|
#account required pam_krb5.so
|
|
account required pam_login_access.so
|
|
account required pam_unix.so
|
|
|
|
# session
|
|
#session optional pam_ssh.so
|
|
session required pam_lastlog.so no_fail
|
|
|
|
# password
|
|
#password sufficient pam_krb5.so no_warn try_first_pass
|
|
password required pam_unix.so no_warn try_first_pass
|