commit:     f6e52e5b96c20426687bc8041b171c9b788d7910
Author:     Sam James <sam <AT> gentoo <DOT> org>
AuthorDate: Sun Jan 28 08:14:35 2024 +0000
Commit:     Sam James <sam <AT> gentoo <DOT> org>
CommitDate: Sun Jan 28 08:14:35 2024 +0000
URL:        https://gitweb.gentoo.org/proj/pambase.git/commit/?id=f6e52e5b

system-auth.tpl: fix sssd's pam_deny

Closes: https://bugs.gentoo.org/922918
Signed-off-by: Sam James <sam <AT> gentoo.org>

 templates/system-auth.tpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl
index 4065e89..9a274a4 100644
--- a/templates/system-auth.tpl
+++ b/templates/system-auth.tpl
@@ -31,7 +31,7 @@ auth          sufficient      pam_sss.so forward_pass {{ 
debug|default('', true) }}
 auth           optional        pam_cap.so
 {% endif %}
 {% if sssd %}
-auth           sufficient      pam_deny.so
+auth           required        pam_deny.so
 {% endif %}
 {% if krb5 %}
 account                [success=2 default=ignore]      pam_krb5.so {{ 
krb5_params }}

Reply via email to