From ba359ad0eed950fd0a898ee6d7a75e3a379c3591 Mon Sep 17 00:00:00 2001 From: christos Date: Tue, 1 Mar 2005 16:28:46 +0000 Subject: [PATCH] use the ksu module not the krb one. Do kerberos authentication first. --- etc/pam.d/su | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/etc/pam.d/su b/etc/pam.d/su index 24a06449ec96..965755d0ae4e 100644 --- a/etc/pam.d/su +++ b/etc/pam.d/su @@ -1,4 +1,4 @@ -# $NetBSD: su,v 1.4 2005/02/27 03:40:14 thorpej Exp $ +# $NetBSD: su,v 1.5 2005/03/01 16:28:46 christos Exp $ # # PAM configuration for the "su" service # @@ -6,9 +6,10 @@ # auth auth sufficient pam_rootok.so no_warn auth sufficient pam_self.so no_warn +auth sufficient pam_ksu.so no_warn try_first_pass auth requisite pam_group.so no_warn group=wheel root_only fail_safe #auth sufficient pam_group.so no_warn group=rootauth root_only fail_safe authenticate -auth include system +auth required pam_unix.so no_warn try_first_pass nullok # account account required pam_login_access.so