Lines 3-19
Link Here
|
3 |
auth sufficient pam_ssh.so |
3 |
auth sufficient pam_ssh.so |
4 |
{% endif %} |
4 |
{% endif %} |
5 |
|
5 |
|
|
|
6 |
auth requisite pam_faillock.so preauth |
7 |
|
6 |
{% if krb5 %} |
8 |
{% if krb5 %} |
7 |
auth [success=3 default=ignore] pam_krb5.so {{ krb5_params }} |
9 |
auth [success=2 default=ignore] pam_krb5.so {{ krb5_params }} |
8 |
{% endif %} |
10 |
{% endif %} |
9 |
|
11 |
|
10 |
auth requisite pam_faillock.so preauth |
|
|
11 |
auth [success=1 default=ignore] pam_unix.so {{ nullok|default('', true) }} {{ debug|default('', true) }} try_first_pass |
12 |
auth [success=1 default=ignore] pam_unix.so {{ nullok|default('', true) }} {{ debug|default('', true) }} try_first_pass |
12 |
auth [default=die] pam_faillock.so authfail |
13 |
auth [default=die] pam_faillock.so authfail |
13 |
auth optional pam_permit.so |
14 |
auth optional pam_permit.so |
14 |
|
15 |
|
15 |
{% if krb5 %} |
16 |
{% if krb5 %} |
16 |
account [success=2 default=ignore] pam_krb5.so {{ krb5_params }} |
17 |
account [success=1 default=ignore] pam_krb5.so {{ krb5_params }} |
17 |
{% endif %} |
18 |
{% endif %} |
18 |
account required pam_unix.so {{ debug|default('', true) }} |
19 |
account required pam_unix.so {{ debug|default('', true) }} |
19 |
account required pam_faillock.so |
20 |
account required pam_faillock.so |