You've already forked ansible-role-auth-duo
fix: Updated with default configs from RHEL 9
This commit is contained in:
@@ -1,12 +1,10 @@
|
|||||||
#%PAM-1.0
|
#%PAM-1.0
|
||||||
auth required pam_sepermit.so
|
|
||||||
auth substack password-auth
|
auth substack password-auth
|
||||||
auth required pam_env.so
|
auth required pam_env.so
|
||||||
auth sufficient pam_duo.so
|
auth sufficient pam_duo.so
|
||||||
auth required pam_deny.so
|
auth required pam_deny.so
|
||||||
auth include postlogin
|
auth include postlogin
|
||||||
# Used with polkit to reauthorize users in remote sessions
|
account required pam_sepermit.so
|
||||||
-auth optional pam_reauthorize.so prepare
|
|
||||||
account required pam_nologin.so
|
account required pam_nologin.so
|
||||||
account include password-auth
|
account include password-auth
|
||||||
password include password-auth
|
password include password-auth
|
||||||
@@ -17,7 +15,6 @@ session required pam_loginuid.so
|
|||||||
session required pam_selinux.so open env_params
|
session required pam_selinux.so open env_params
|
||||||
session required pam_namespace.so
|
session required pam_namespace.so
|
||||||
session optional pam_keyinit.so force revoke
|
session optional pam_keyinit.so force revoke
|
||||||
|
session optional pam_motd.so
|
||||||
session include password-auth
|
session include password-auth
|
||||||
session include postlogin
|
session include postlogin
|
||||||
# Used with polkit to reauthorize users in remote sessions
|
|
||||||
-session optional pam_reauthorize.so prepare
|
|
||||||
Reference in New Issue
Block a user