On Wed, Dec 09, 2009 at 02:45:31PM -0600, Will Fiveash wrote: > On Wed, Dec 09, 2009 at 02:34:09PM -0500, Wyllys Ingersoll wrote: > > * If PAM_AUTHTOK is NOT set, prompt for the PIN and attempt to use it. If > > it fails, return > > AUTHFAIL. > > Well, depending on the control flag it will either return failure or > ignore.
Nevermind the above, the module with return failure with the control flag influencing the auth stack evaluation. -- Will Fiveash Sun Microsystems Inc. http://opensolaris.org/os/project/kerberos/ Sent from mutt, a sweet ASCII MUA