blob: 5de67290e4d3c49ef8eca3ff5fe968d0d8e6775d (
plain) (
blame)
1
2
3
4
5
6
7
8
9
|
account [success=2 new_authtok_reqd=done default=ignore] pam_unix.so
account [success=1 default=ignore] pam_sss.so use_first_pass
# here's the fallback if no module succeeds
account requisite pam_deny.so
# prime the stack with a positive return value if there isn't one already;
# this avoids us returning an error just because nothing sets a success code
# since the modules above will each just jump around
account required pam_permit.so
|
