Attachment 952613 Details for Bug 1159385 – pam-files

pam-files

pamfiles (text/plain), 3.85 KB, created by adam winberg on 2014-10-31 20:54:39 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: adam winberg

Created: 2014-10-31 20:54:39 UTC

Size: 3.85 KB

patch

obsolete

>/etc/pam.d/smartcard-auth
>----------------------
>auth        required                    pam_env.so
>auth        requisite                   pam_pkcs11.so  wait_for_card
>auth        optional                    pam_gnome_keyring.so
>auth        optional                    pam_krb5.so  use_first_pass no_subsequent_prompt
>auth        sufficient                  pam_succeed_if.so uid > 500
>auth        required                    pam_deny.so
>
>account     required      pam_unix.so
>account     sufficient    pam_localuser.so
>account     sufficient    pam_succeed_if.so uid > 500
>account     required      pam_permit.so
>
>password    required      pam_pkcs11.so
>
>session     optional                    pam_keyinit.so revoke
>session     required                    pam_limits.so
>-session    optional                    pam_systemd.so
>session     optional                    pam_oddjob_mkhomedir.so umask=0077
>session     optional                    pam_gnome_keyring.so auto_start
>session     [success=1 default=ignore]  pam_succeed_if.so service in crond quiet use_uid
>session     required                    pam_unix.so
>
>
>/etc/pam.d/password-auth
>----------------------
>auth        required      pam_env.so
>auth        sufficient    pam_sss.so forward_pass
>auth        sufficient    pam_unix.so nullok try_first_pass
>auth        requisite     pam_succeed_if.so uid >= 500 quiet_success
>auth        required      pam_deny.so
>
>account     [default=bad success=ok user_unknown=ignore] pam_sss.so
>account     required      pam_unix.so
>account     sufficient    pam_localuser.so
>account     sufficient    pam_succeed_if.so uid < 1000 quiet
>account     required      pam_permit.so
>
>#password    requisite     pam_pwquality.so retry=3 dcredit=-1 ucredit=-1 ocredit=-1 lcredit=0 minlen=8
>password    sufficient    pam_sss.so use_authtok
>password    sufficient    pam_unix.so sha512 shadow nullok try_first_pass use_authtok
>password    required      pam_deny.so
>
>session     optional      pam_keyinit.so revoke
>session     required      pam_limits.so
>-session     optional      pam_systemd.so
>session     optional      pam_oddjob_mkhomedir.so umask=0077
>session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
>session     required      pam_unix.so
>session     optional      pam_sss.so
>
>
>/etc/pam.d/system-auth
>----------------------
>auth        required                    pam_env.so
>auth        [success=3 default=ignore]  pam_succeed_if.so service notin login:gdm:xdm:kdm:xscreensaver:gnome-screensaver:kscreensaver quiet use_uid
>auth        requisite                   pam_pkcs11.so wait_for_card
>auth        [success=ignore default=4]  pam_exec.so quiet /bin/ping -c1 -w5 ad.example.com
>auth        [default=3]                 pam_krb5.so use_first_pass no_subsequent_prompt
>auth        sufficient                  pam_unix.so nullok try_first_pass
>auth        requisite                   pam_succeed_if.so uid >= 500 quiet_success
>auth        required                    pam_deny.so
>
>account     required      pam_unix.so broken_shadow
>account     sufficient    pam_localuser.so
>account     sufficient    pam_succeed_if.so uid < 500 quiet
>account     [default=bad success=ok user_unknown=ignore] pam_sss.so
>account     required      pam_permit.so
>
>password    requisite     pam_pwquality.so retry=3 dcredit=-1 ucredit=-1 ocredit=-1 lcredit=0 minlen=8
>password    sufficient    pam_unix.so sha512 shadow nullok try_first_pass use_authtok
>password    required      pam_deny.so
>
>session     optional                    pam_keyinit.so revoke
>session     required                    pam_limits.so
>-session    optional                    pam_systemd.so
>session     optional                    pam_oddjob_mkhomedir.so umask=0077
>session     [success=1 default=ignore]  pam_succeed_if.so service in crond quiet use_uid
>session     required                    pam_unix.so
>session     optional                    pam_sss.so

Actions: View

Attachments on bug 1159385: 952613 | 954024