Add pam_afslog. Like pam_krb5, this is a fast, quiet no-op if you aren't

actually using it the subsystem.

Approved by: gendalia
This commit is contained in:
tsarna 2005-09-22 01:02:12 +00:00
parent 4f5ce13e05
commit a3e8f0991e
4 changed files with 8 additions and 4 deletions

View File

@ -1,4 +1,4 @@
# $NetBSD: display_manager,v 1.2 2005/02/27 21:35:59 thorpej Exp $
# $NetBSD: display_manager,v 1.3 2005/09/22 01:02:12 tsarna Exp $
#
# PAM configuration for the display manager services. Specific display
# manager service configurations can include this one.
@ -7,6 +7,7 @@
# auth
auth required pam_nologin.so no_warn
auth sufficient pam_krb5.so no_warn try_first_pass
auth optional pam_afslog.so no_warn try_first_pass
# pam_ssh has potential security risks. See pam_ssh(8).
#auth sufficient pam_ssh.so no_warn try_first_pass
auth required pam_unix.so no_warn try_first_pass

View File

@ -1,4 +1,4 @@
# $NetBSD: ftpd,v 1.5 2005/02/27 03:40:14 thorpej Exp $
# $NetBSD: ftpd,v 1.6 2005/09/22 01:02:12 tsarna Exp $
#
# PAM configuration for the "ftpd" service
#
@ -8,6 +8,7 @@
# pam_unix.
auth required pam_nologin.so no_warn
auth sufficient pam_krb5.so no_warn try_first_pass
auth optional pam_afslog.so no_warn try_first_pass
auth required pam_unix.so no_warn try_first_pass
# account

View File

@ -1,4 +1,4 @@
# $NetBSD: sshd,v 1.7 2005/03/17 01:47:18 christos Exp $
# $NetBSD: sshd,v 1.8 2005/09/22 01:02:12 tsarna Exp $
#
# PAM configuration for the "sshd" service
#
@ -6,6 +6,7 @@
# auth
auth required pam_nologin.so no_warn
auth sufficient pam_krb5.so no_warn try_first_pass
auth optional pam_afslog.so no_warn try_first_pass
# pam_ssh has potential security risks. See pam_ssh(8).
#auth sufficient pam_ssh.so no_warn try_first_pass
auth required pam_unix.so no_warn try_first_pass

View File

@ -1,10 +1,11 @@
# $NetBSD: system,v 1.6 2005/03/03 02:12:32 christos Exp $
# $NetBSD: system,v 1.7 2005/09/22 01:02:12 tsarna Exp $
#
# System-wide defaults
#
# auth
auth sufficient pam_krb5.so no_warn try_first_pass
auth optional pam_afslog.so no_warn try_first_pass
auth required pam_unix.so no_warn try_first_pass nullok
# account