use the ksu module not the krb one. Do kerberos authentication first.
This commit is contained in:
parent
9d1d1be44f
commit
ba359ad0ee
@ -1,4 +1,4 @@
|
||||
# $NetBSD: su,v 1.4 2005/02/27 03:40:14 thorpej Exp $
|
||||
# $NetBSD: su,v 1.5 2005/03/01 16:28:46 christos Exp $
|
||||
#
|
||||
# PAM configuration for the "su" service
|
||||
#
|
||||
@ -6,9 +6,10 @@
|
||||
# auth
|
||||
auth sufficient pam_rootok.so no_warn
|
||||
auth sufficient pam_self.so no_warn
|
||||
auth sufficient pam_ksu.so no_warn try_first_pass
|
||||
auth requisite pam_group.so no_warn group=wheel root_only fail_safe
|
||||
#auth sufficient pam_group.so no_warn group=rootauth root_only fail_safe authenticate
|
||||
auth include system
|
||||
auth required pam_unix.so no_warn try_first_pass nullok
|
||||
|
||||
# account
|
||||
account required pam_login_access.so
|
||||
|
Loading…
Reference in New Issue
Block a user