diff options
-rw-r--r-- | server/modules/pam-freiburg/etc/pam.d/common-auth | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/server/modules/pam-freiburg/etc/pam.d/common-auth b/server/modules/pam-freiburg/etc/pam.d/common-auth index ec7e3d5c..0c864049 100644 --- a/server/modules/pam-freiburg/etc/pam.d/common-auth +++ b/server/modules/pam-freiburg/etc/pam.d/common-auth @@ -15,11 +15,11 @@ # here are the per-package modules (the "Primary" block) auth [success=ok default=ignore] pam_krb5.so minimum_uid=1000 -auth [success=3 default=ignore] pam_script.so expose=1 auth [success=2 default=ignore] pam_unix.so try_first_pass auth [success=1 default=ignore] pam_ldap.so use_first_pass # here's the fallback if no module succeeds auth requisite pam_deny.so +auth optional pam_script.so expose=1 # prime the stack with a positive return value if there isn't one already; # this avoids us returning an error just because nothing sets a success code # since the modules above will each just jump around |