33 lines
2.1 KiB
Plaintext
33 lines
2.1 KiB
Plaintext
|
# Generated by authselect on Sat Feb 11 00:24:04 2023
|
||
|
# Do not modify this file manually, use authselect instead. Any user changes will be overwritten.
|
||
|
# You can stop authselect from managing your configuration by calling 'authselect opt-out'.
|
||
|
# See authselect(8) for more details.
|
||
|
|
||
|
auth required pam_env.so
|
||
|
auth required pam_faildelay.so delay=2000000
|
||
|
auth [default=1 ignore=ignore success=ok] pam_usertype.so isregular
|
||
|
auth [default=1 ignore=ignore success=ok] pam_localuser.so
|
||
|
auth sufficient pam_unix.so nullok
|
||
|
auth [default=1 ignore=ignore success=ok] pam_usertype.so isregular
|
||
|
auth sufficient pam_sss.so forward_pass
|
||
|
auth required pam_deny.so
|
||
|
|
||
|
account required pam_unix.so
|
||
|
account sufficient pam_localuser.so
|
||
|
account sufficient pam_usertype.so issystem
|
||
|
account [default=bad success=ok user_unknown=ignore] pam_sss.so
|
||
|
account required pam_permit.so
|
||
|
|
||
|
password requisite pam_pwquality.so local_users_only
|
||
|
password sufficient pam_unix.so yescrypt shadow nullok use_authtok
|
||
|
password sufficient pam_sss.so use_authtok
|
||
|
password required pam_deny.so
|
||
|
|
||
|
session optional pam_keyinit.so revoke
|
||
|
session required pam_limits.so
|
||
|
-session optional pam_systemd.so
|
||
|
session optional pam_oddjob_mkhomedir.so
|
||
|
session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
|
||
|
session required pam_unix.so
|
||
|
session optional pam_sss.so
|