summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMikle Kolyada <zlogene@gentoo.org>2020-10-28 22:24:04 +0300
committerMikle Kolyada <zlogene@gentoo.org>2020-10-28 22:24:04 +0300
commitde5f97873c345b69c44df5a9d06fcd69ee6c5ccf (patch)
tree833f3b69b471d4f6c77c82755f94f9ff174cf3d8
parentDo not use use_authtok if no passwd module was stacked (diff)
downloadpambase-de5f97873c345b69c44df5a9d06fcd69ee6c5ccf.tar.gz
pambase-de5f97873c345b69c44df5a9d06fcd69ee6c5ccf.tar.bz2
pambase-de5f97873c345b69c44df5a9d06fcd69ee6c5ccf.zip
fix number of jumps when pam_krb5 usedpambase-20201028.1
Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
-rw-r--r--templates/system-auth.tpl2
-rw-r--r--templates/system-login.tpl1
2 files changed, 1 insertions, 2 deletions
diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl
index 6edba8d..6964e05 100644
--- a/templates/system-auth.tpl
+++ b/templates/system-auth.tpl
@@ -4,7 +4,7 @@ auth sufficient pam_ssh.so
{% endif %}
{% if krb5 %}
-auth [success=4 default=ignore] pam_krb5.so {{ krb5_params }}
+auth [success=3 default=ignore] pam_krb5.so {{ krb5_params }}
{% endif %}
auth requisite pam_faillock.so preauth
diff --git a/templates/system-login.tpl b/templates/system-login.tpl
index 6a0d544..0c60bb6 100644
--- a/templates/system-login.tpl
+++ b/templates/system-login.tpl
@@ -5,7 +5,6 @@ auth include system-auth
account required pam_access.so {{ debug|default('', true) }}
account required pam_nologin.so
account include system-auth
-account required pam_faillock.so
password include system-auth
session optional pam_loginuid.so