commit: f6e52e5b96c20426687bc8041b171c9b788d7910 Author: Sam James <sam <AT> gentoo <DOT> org> AuthorDate: Sun Jan 28 08:14:35 2024 +0000 Commit: Sam James <sam <AT> gentoo <DOT> org> CommitDate: Sun Jan 28 08:14:35 2024 +0000 URL: https://gitweb.gentoo.org/proj/pambase.git/commit/?id=f6e52e5b
system-auth.tpl: fix sssd's pam_deny Closes: https://bugs.gentoo.org/922918 Signed-off-by: Sam James <sam <AT> gentoo.org> templates/system-auth.tpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl index 4065e89..9a274a4 100644 --- a/templates/system-auth.tpl +++ b/templates/system-auth.tpl @@ -31,7 +31,7 @@ auth sufficient pam_sss.so forward_pass {{ debug|default('', true) }} auth optional pam_cap.so {% endif %} {% if sssd %} -auth sufficient pam_deny.so +auth required pam_deny.so {% endif %} {% if krb5 %} account [success=2 default=ignore] pam_krb5.so {{ krb5_params }}