pam-config-1.6.0/000075500000000000000000000000001204704107400135335ustar00rootroot00000000000000pam-config-1.6.0/common-login000064400000000000000000000004011204704107400160470ustar00rootroot00000000000000#%PAM-1.0 auth substack system-auth auth required pam_nologin.so account substack system-auth account required pam_nologin.so password include system-auth session substack system-auth session required pam_loginuid.so -session optional pam_systemd.so pam-config-1.6.0/common-login-use_first_pass000064400000000000000000000001221204704107400210760ustar00rootroot00000000000000#%PAM-1.0 auth substack system-auth-use_first_pass auth required pam_nologin.so pam-config-1.6.0/other000064400000000000000000000001771204704107400146040ustar00rootroot00000000000000#%PAM-1.0 auth required pam_deny.so account required pam_deny.so password required pam_deny.so session required pam_deny.so pam-config-1.6.0/system-auth000077700000000000000000000000001204704107400212342system-auth-localustar00rootroot00000000000000pam-config-1.6.0/system-auth-krb5000064400000000000000000000016011204704107400166000ustar00rootroot00000000000000#%PAM-1.0 auth [success=2 default=ignore] pam_tcb.so shadow fork prefix=$2y$ count=8 nullok auth requisite pam_succeed_if.so uid >= 500 quiet auth required pam_krb5.so use_first_pass auth required pam_permit.so account [success=2 default=ignore] pam_tcb.so shadow fork account requisite pam_succeed_if.so uid >= 500 quiet account required pam_krb5.so account required pam_permit.so password required pam_passwdqc.so config=/etc/passwdqc.conf password [success=2 default=ignore] pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb password requisite pam_succeed_if.so uid >= 500 quiet password required pam_krb5.so use_authtok session [success=2 default=ignore] pam_tcb.so session requisite pam_succeed_if.so uid >= 500 quiet session required pam_krb5.so session required pam_mktemp.so session required pam_mkhomedir.so silent session required pam_limits.so pam-config-1.6.0/system-auth-krb5_ccreds000064400000000000000000000007741204704107400201350ustar00rootroot00000000000000#%PAM-1.0 auth [success=4 default=ignore] pam_tcb.so shadow fork prefix=$2y$ count=8 nullok auth requisite pam_succeed_if.so uid >= 500 quiet auth [success=1 default=ignore service_err=reset] pam_krb5.so use_first_pass ccache=/tmp/krb5cc_%u auth [success=1 default=die] pam_ccreds.so action=validate use_first_pass auth optional pam_ccreds.so action=store use_first_pass auth required pam_permit.so account include system-auth-krb5 password include system-auth-krb5 session include system-auth-krb5 pam-config-1.6.0/system-auth-ldap000064400000000000000000000016011204704107400166550ustar00rootroot00000000000000#%PAM-1.0 auth [success=2 default=ignore] pam_tcb.so shadow fork prefix=$2y$ count=8 nullok auth requisite pam_succeed_if.so uid >= 500 quiet auth required pam_ldap.so use_first_pass auth required pam_permit.so account [success=2 default=ignore] pam_tcb.so shadow fork account requisite pam_succeed_if.so uid >= 500 quiet account required pam_ldap.so account required pam_permit.so password required pam_passwdqc.so config=/etc/passwdqc.conf password [success=2 default=ignore] pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb password requisite pam_succeed_if.so uid >= 500 quiet password required pam_ldap.so use_authtok session [success=2 default=ignore] pam_tcb.so session requisite pam_succeed_if.so uid >= 500 quiet session required pam_ldap.so session required pam_mktemp.so session required pam_mkhomedir.so silent session required pam_limits.so pam-config-1.6.0/system-auth-local000064400000000000000000000005521204704107400170330ustar00rootroot00000000000000#%PAM-1.0 auth required pam_tcb.so shadow fork prefix=$2y$ count=8 nullok account required pam_tcb.so shadow fork password required pam_passwdqc.so config=/etc/passwdqc.conf password required pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb session required pam_tcb.so session required pam_mktemp.so session required pam_limits.so pam-config-1.6.0/system-auth-multi000064400000000000000000000024321204704107400170720ustar00rootroot00000000000000#%PAM-1.0 auth [success=4 default=ignore] pam_tcb.so shadow fork prefix=$2y$ count=8 nullok auth requisite pam_succeed_if.so uid >= 500 quiet -auth [success=2 default=ignore] pam_krb5.so use_first_pass -auth [success=1 default=ignore] pam_ldap.so use_first_pass auth required pam_deny.so auth required pam_permit.so account [success=4 default=ignore] pam_tcb.so shadow fork account requisite pam_succeed_if.so uid >= 500 quiet -account [success=2 default=ignore] pam_krb5.so -account [success=1 default=ignore] pam_ldap.so account required pam_deny.so account required pam_permit.so password required pam_passwdqc.so config=/etc/passwdqc.conf password [success=4 default=ignore] pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb password requisite pam_succeed_if.so uid >= 500 quiet -password [success=2 default=ignore] pam_krb5.so use_authtok -password [success=1 default=ignore] pam_ldap.so use_authtok password required pam_deny.so session [success=4 default=ignore] pam_tcb.so session requisite pam_succeed_if.so uid >= 500 quiet -session [success=2 default=ignore] pam_krb5.so -session [success=1 default=ignore] pam_ldap.so session required pam_deny.so session required pam_mktemp.so session required pam_mkhomedir.so silent session required pam_limits.so pam-config-1.6.0/system-auth-pkcs11000064400000000000000000000004151204704107400170410ustar00rootroot00000000000000#%PAM-1.0 auth [success=1 default=ignore] pam_pkcs11.so auth substack system-auth-local auth required pam_permit.so account include system-auth-local password include system-auth-local session include system-auth-local session required pam_mkhomedir.so silent pam-config-1.6.0/system-auth-use_first_pass000077700000000000000000000000001204704107400273122system-auth-use_first_pass-localustar00rootroot00000000000000pam-config-1.6.0/system-auth-use_first_pass-krb5000064400000000000000000000007261204704107400216360ustar00rootroot00000000000000#%PAM-1.0 auth [success=2 default=ignore] pam_tcb.so shadow fork prefix=$2y$ count=8 nullok use_first_pass auth requisite pam_succeed_if.so uid >= 500 quiet auth required pam_krb5.so use_first_pass auth required pam_permit.so password [success=2 default=ignore] pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb password requisite pam_succeed_if.so uid >= 500 quiet password required pam_krb5.so use_authtok password required pam_permit.so pam-config-1.6.0/system-auth-use_first_pass-krb5_ccreds000064400000000000000000000007271204704107400231620ustar00rootroot00000000000000#%PAM-1.0 auth [success=4 default=ignore] pam_tcb.so shadow fork prefix=$2y$ count=8 nullok use_first_pass auth requisite pam_succeed_if.so uid >= 500 quiet auth [success=1 default=ignore service_err=reset] pam_krb5.so use_first_pass ccache=/tmp/krb5cc_%u auth [success=1 default=die] pam_ccreds.so action=validate use_first_pass auth optional pam_ccreds.so action=store use_first_pass auth required pam_permit.so password include system-auth-use_first_pass-krb5 pam-config-1.6.0/system-auth-use_first_pass-ldap000064400000000000000000000007261204704107400217130ustar00rootroot00000000000000#%PAM-1.0 auth [success=2 default=ignore] pam_tcb.so shadow fork prefix=$2y$ count=8 nullok use_first_pass auth requisite pam_succeed_if.so uid >= 500 quiet auth required pam_ldap.so use_first_pass auth required pam_permit.so password [success=2 default=ignore] pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb password requisite pam_succeed_if.so uid >= 500 quiet password required pam_ldap.so use_authtok password required pam_permit.so pam-config-1.6.0/system-auth-use_first_pass-local000064400000000000000000000002671204704107400220650ustar00rootroot00000000000000#%PAM-1.0 auth required pam_tcb.so shadow fork prefix=$2y$ count=8 nullok use_first_pass password required pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb pam-config-1.6.0/system-auth-use_first_pass-multi000064400000000000000000000012571204704107400221250ustar00rootroot00000000000000#%PAM-1.0 auth [success=4 default=ignore] pam_tcb.so shadow fork prefix=$2y$ count=8 nullok use_first_pass auth requisite pam_succeed_if.so uid >= 500 quiet -auth [success=2 default=ignore] pam_krb5.so use_first_pass -auth [success=1 default=ignore] pam_ldap.so use_first_pass auth required pam_deny.so auth required pam_permit.so password [success=4 default=ignore] pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb password requisite pam_succeed_if.so uid >= 500 quiet -password [success=2 default=ignore] pam_krb5.so use_authtok -password [success=1 default=ignore] pam_ldap.so use_authtok password required pam_deny.so password required pam_permit.so pam-config-1.6.0/system-auth-use_first_pass-pkcs11000064400000000000000000000003101204704107400220620ustar00rootroot00000000000000#%PAM-1.0 auth [success=1 default=ignore] pam_pkcs11.so use_first_pass auth substack system-auth-use_first_pass-local auth required pam_permit.so password include system-auth-use_first_pass-local