Accepting request 1039542 from home:AZhou:branches:GNOME:Factory
- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this they do not really support fingerprint and smartcard, just put correct configuration to make them work (bsc#1205664). - Enable split authentication because we have correct gdm-fingerprint.pamd and gdm-smartcard.pamd. OBS-URL: https://build.opensuse.org/request/show/1039542 OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/gdm?expand=0&rev=509
This commit is contained in:
@@ -1,19 +1,17 @@
|
||||
# Sample PAM file for doing smartcard authentication.
|
||||
# Distros should replace this with what makes sense for them.
|
||||
auth requisite pam_nologin.so
|
||||
auth required pam_env.so
|
||||
auth [success=done ignore=ignore default=die] pam_pkcs11.so wait_for_card card_only
|
||||
auth requisite pam_succeed_if.so uid >= 500 quiet
|
||||
auth required pam_deny.so
|
||||
#%PAM-1.0
|
||||
|
||||
account required pam_unix.so
|
||||
account sufficient pam_localuser.so
|
||||
account sufficient pam_succeed_if.so uid < 500 quiet
|
||||
account required pam_permit.so
|
||||
auth requisite pam_nologin.so
|
||||
auth requisite pam_faillock.so preauth
|
||||
auth required pam_pkcs11.so wait_for_card card_only
|
||||
auth required pam_shells.so
|
||||
auth optional pam_permit.so
|
||||
auth required pam_env.so
|
||||
auth [success=ok default=1] pam_gdm.so
|
||||
auth optional pam_gnome_keyring.so
|
||||
|
||||
password optional pam_pkcs11.so
|
||||
password requisite pam_cracklib.so try_first_pass retry=3 type=
|
||||
account include common-account
|
||||
|
||||
session optional pam_keyinit.so revoke
|
||||
session required pam_limits.so
|
||||
session required pam_unix.so
|
||||
password required pam_deny.so
|
||||
|
||||
session include common-session
|
||||
session optional pam_gnome_keyring.so auto_start
|
||||
|
Reference in New Issue
Block a user