SHA256
1
0
forked from pool/gdm

Accepting request 1039542 from home:AZhou:branches:GNOME:Factory

- Update gdm-fingerprint.pamd and gdm-smartcard.pamd: Before this
  they do not really support fingerprint and smartcard, just put
  correct configuration to make them work (bsc#1205664).
- Enable split authentication because we have correct
  gdm-fingerprint.pamd and gdm-smartcard.pamd.

OBS-URL: https://build.opensuse.org/request/show/1039542
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/gdm?expand=0&rev=509
This commit is contained in:
2022-12-03 11:22:00 +00:00
committed by Git OBS Bridge
parent 9cdbe24f53
commit 71999e468d
4 changed files with 38 additions and 37 deletions

View File

@@ -1,19 +1,17 @@
# Sample PAM file for doing smartcard authentication.
# Distros should replace this with what makes sense for them.
auth requisite pam_nologin.so
auth required pam_env.so
auth [success=done ignore=ignore default=die] pam_pkcs11.so wait_for_card card_only
auth requisite pam_succeed_if.so uid >= 500 quiet
auth required pam_deny.so
#%PAM-1.0
account required pam_unix.so
account sufficient pam_localuser.so
account sufficient pam_succeed_if.so uid < 500 quiet
account required pam_permit.so
auth requisite pam_nologin.so
auth requisite pam_faillock.so preauth
auth required pam_pkcs11.so wait_for_card card_only
auth required pam_shells.so
auth optional pam_permit.so
auth required pam_env.so
auth [success=ok default=1] pam_gdm.so
auth optional pam_gnome_keyring.so
password optional pam_pkcs11.so
password requisite pam_cracklib.so try_first_pass retry=3 type=
account include common-account
session optional pam_keyinit.so revoke
session required pam_limits.so
session required pam_unix.so
password required pam_deny.so
session include common-session
session optional pam_gnome_keyring.so auto_start