Main   Changelog   Spec   Patches   Sources   Download   Gear   Bugs and FR  Repocop 

pam-config-1.6.0/000075500000000000000000000000001204704107400135335ustar00rootroot00000000000000pam-config-1.6.0/common-login000064400000000000000000000004011204704107400160470ustar00rootroot00000000000000#%PAM-1.0
auth		substack	system-auth
auth		required	pam_nologin.so
account		substack	system-auth
account		required	pam_nologin.so
password	include		system-auth
session		substack	system-auth
session		required	pam_loginuid.so
-session	optional	pam_systemd.so
pam-config-1.6.0/common-login-use_first_pass000064400000000000000000000001221204704107400210760ustar00rootroot00000000000000#%PAM-1.0
auth		substack	system-auth-use_first_pass
auth		required	pam_nologin.so
pam-config-1.6.0/other000064400000000000000000000001771204704107400146040ustar00rootroot00000000000000#%PAM-1.0
auth		required	pam_deny.so
account		required	pam_deny.so
password	required	pam_deny.so
session		required	pam_deny.so
pam-config-1.6.0/system-auth000077700000000000000000000000001204704107400212342system-auth-localustar00rootroot00000000000000pam-config-1.6.0/system-auth-krb5000064400000000000000000000016011204704107400166000ustar00rootroot00000000000000#%PAM-1.0
auth		[success=2 default=ignore]	pam_tcb.so shadow fork prefix=$2y$ count=8 nullok
auth		requisite	pam_succeed_if.so uid >= 500 quiet
auth		required	pam_krb5.so use_first_pass
auth		required	pam_permit.so

account		[success=2 default=ignore]	pam_tcb.so shadow fork
account		requisite	pam_succeed_if.so uid >= 500 quiet
account		required	pam_krb5.so
account		required	pam_permit.so

password	required	pam_passwdqc.so config=/etc/passwdqc.conf
password	[success=2 default=ignore]	pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb
password	requisite	pam_succeed_if.so uid >= 500 quiet
password	required	pam_krb5.so use_authtok

session		[success=2 default=ignore]	pam_tcb.so
session		requisite	pam_succeed_if.so uid >= 500 quiet
session		required	pam_krb5.so
session		required	pam_mktemp.so
session		required	pam_mkhomedir.so silent
session		required	pam_limits.so
pam-config-1.6.0/system-auth-krb5_ccreds000064400000000000000000000007741204704107400201350ustar00rootroot00000000000000#%PAM-1.0
auth		[success=4 default=ignore]	pam_tcb.so shadow fork prefix=$2y$ count=8 nullok
auth		requisite	pam_succeed_if.so uid >= 500 quiet
auth		[success=1 default=ignore service_err=reset]	pam_krb5.so use_first_pass ccache=/tmp/krb5cc_%u
auth		[success=1 default=die]	pam_ccreds.so action=validate use_first_pass
auth		optional pam_ccreds.so action=store use_first_pass
auth		required	pam_permit.so

account		include	system-auth-krb5
password	include	system-auth-krb5
session		include	system-auth-krb5
pam-config-1.6.0/system-auth-ldap000064400000000000000000000016011204704107400166550ustar00rootroot00000000000000#%PAM-1.0
auth		[success=2 default=ignore]	pam_tcb.so shadow fork prefix=$2y$ count=8 nullok
auth		requisite	pam_succeed_if.so uid >= 500 quiet
auth		required	pam_ldap.so use_first_pass
auth		required	pam_permit.so

account		[success=2 default=ignore]	pam_tcb.so shadow fork
account		requisite	pam_succeed_if.so uid >= 500 quiet
account		required	pam_ldap.so
account		required	pam_permit.so

password	required	pam_passwdqc.so config=/etc/passwdqc.conf
password	[success=2 default=ignore]	pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb
password	requisite	pam_succeed_if.so uid >= 500 quiet
password	required	pam_ldap.so use_authtok

session		[success=2 default=ignore]	pam_tcb.so
session		requisite	pam_succeed_if.so uid >= 500 quiet
session		required	pam_ldap.so
session		required	pam_mktemp.so
session		required	pam_mkhomedir.so silent
session		required	pam_limits.so
pam-config-1.6.0/system-auth-local000064400000000000000000000005521204704107400170330ustar00rootroot00000000000000#%PAM-1.0
auth		required	pam_tcb.so shadow fork prefix=$2y$ count=8 nullok
account		required	pam_tcb.so shadow fork
password	required	pam_passwdqc.so config=/etc/passwdqc.conf
password	required	pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb
session		required	pam_tcb.so
session		required	pam_mktemp.so
session		required	pam_limits.so
pam-config-1.6.0/system-auth-multi000064400000000000000000000024321204704107400170720ustar00rootroot00000000000000#%PAM-1.0
auth		[success=4 default=ignore]	pam_tcb.so shadow fork prefix=$2y$ count=8 nullok
auth		requisite	pam_succeed_if.so uid >= 500 quiet
-auth		[success=2 default=ignore]	pam_krb5.so use_first_pass
-auth		[success=1 default=ignore]	pam_ldap.so use_first_pass
auth		required	pam_deny.so
auth		required	pam_permit.so

account		[success=4 default=ignore]	pam_tcb.so shadow fork
account		requisite	pam_succeed_if.so uid >= 500 quiet
-account	[success=2 default=ignore]	pam_krb5.so
-account	[success=1 default=ignore]	pam_ldap.so
account		required	pam_deny.so
account		required	pam_permit.so

password	required	pam_passwdqc.so config=/etc/passwdqc.conf
password	[success=4 default=ignore]	pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb
password	requisite	pam_succeed_if.so uid >= 500 quiet
-password	[success=2 default=ignore]	pam_krb5.so use_authtok
-password	[success=1 default=ignore]	pam_ldap.so use_authtok
password	required	pam_deny.so

session		[success=4 default=ignore]	pam_tcb.so
session		requisite	pam_succeed_if.so uid >= 500 quiet
-session	[success=2 default=ignore]	pam_krb5.so
-session	[success=1 default=ignore]	pam_ldap.so
session		required	pam_deny.so
session		required	pam_mktemp.so
session		required	pam_mkhomedir.so silent
session		required	pam_limits.so
pam-config-1.6.0/system-auth-pkcs11000064400000000000000000000004151204704107400170410ustar00rootroot00000000000000#%PAM-1.0
auth		[success=1 default=ignore]	pam_pkcs11.so
auth		substack	system-auth-local
auth		required	pam_permit.so

account		include	system-auth-local

password	include	system-auth-local

session		include	system-auth-local
session		required	pam_mkhomedir.so silent
pam-config-1.6.0/system-auth-use_first_pass000077700000000000000000000000001204704107400273122system-auth-use_first_pass-localustar00rootroot00000000000000pam-config-1.6.0/system-auth-use_first_pass-krb5000064400000000000000000000007261204704107400216360ustar00rootroot00000000000000#%PAM-1.0
auth		[success=2 default=ignore]	pam_tcb.so shadow fork prefix=$2y$ count=8 nullok use_first_pass
auth		requisite	pam_succeed_if.so uid >= 500 quiet
auth		required	pam_krb5.so use_first_pass
auth		required	pam_permit.so

password	[success=2 default=ignore]	pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb
password	requisite	pam_succeed_if.so uid >= 500 quiet
password	required	pam_krb5.so use_authtok
password	required	pam_permit.so
pam-config-1.6.0/system-auth-use_first_pass-krb5_ccreds000064400000000000000000000007271204704107400231620ustar00rootroot00000000000000#%PAM-1.0
auth		[success=4 default=ignore]	pam_tcb.so shadow fork prefix=$2y$ count=8 nullok use_first_pass
auth		requisite	pam_succeed_if.so uid >= 500 quiet
auth		[success=1 default=ignore service_err=reset]	pam_krb5.so use_first_pass ccache=/tmp/krb5cc_%u
auth		[success=1 default=die]	pam_ccreds.so action=validate use_first_pass
auth		optional	pam_ccreds.so action=store use_first_pass
auth		required	pam_permit.so

password	include		system-auth-use_first_pass-krb5
pam-config-1.6.0/system-auth-use_first_pass-ldap000064400000000000000000000007261204704107400217130ustar00rootroot00000000000000#%PAM-1.0
auth		[success=2 default=ignore]	pam_tcb.so shadow fork prefix=$2y$ count=8 nullok use_first_pass
auth		requisite	pam_succeed_if.so uid >= 500 quiet
auth		required	pam_ldap.so use_first_pass
auth		required	pam_permit.so

password	[success=2 default=ignore]	pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb
password	requisite	pam_succeed_if.so uid >= 500 quiet
password	required	pam_ldap.so use_authtok
password	required	pam_permit.so
pam-config-1.6.0/system-auth-use_first_pass-local000064400000000000000000000002671204704107400220650ustar00rootroot00000000000000#%PAM-1.0
auth		required	pam_tcb.so shadow fork prefix=$2y$ count=8 nullok use_first_pass
password	required	pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb
pam-config-1.6.0/system-auth-use_first_pass-multi000064400000000000000000000012571204704107400221250ustar00rootroot00000000000000#%PAM-1.0
auth		[success=4 default=ignore]	pam_tcb.so shadow fork prefix=$2y$ count=8 nullok use_first_pass
auth		requisite	pam_succeed_if.so uid >= 500 quiet
-auth		[success=2 default=ignore]	pam_krb5.so use_first_pass
-auth		[success=1 default=ignore]	pam_ldap.so use_first_pass
auth		required	pam_deny.so
auth		required	pam_permit.so

password	[success=4 default=ignore]	pam_tcb.so use_authtok shadow fork prefix=$2y$ count=8 nullok write_to=tcb
password	requisite	pam_succeed_if.so uid >= 500 quiet
-password	[success=2 default=ignore]	pam_krb5.so use_authtok
-password	[success=1 default=ignore]	pam_ldap.so use_authtok
password	required	pam_deny.so
password	required	pam_permit.so
pam-config-1.6.0/system-auth-use_first_pass-pkcs11000064400000000000000000000003101204704107400220620ustar00rootroot00000000000000#%PAM-1.0
auth		[success=1 default=ignore]	pam_pkcs11.so use_first_pass
auth		substack	system-auth-use_first_pass-local
auth		required	pam_permit.so

password	include	system-auth-use_first_pass-local