mart-w/kanidm
1
0
Fork 0
mirror of https://github.com/kanidm/kanidm.git synced 2025-02-23 12:37:00 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity
kanidm/unix_integration/pam_kanidm/debian/kanidm.pam

20 lines
440 B
Plaintext
Raw Permalink Normal View History

Add /etc/skel templating and notes adjacent to kanidm-unixd and packaging (#1113)
2022-11-04 00:49:11 +01:00
Name: Kanidm Authentication
Default: yes
Reduce `pam_kanidm`'s priority in Debian platforms (#2209) `pam_kanidm` doesn't set AUTHTOK after reading from user input, so modules down the stack will have to ask for passwords redundantly. This is only a workaround, and might not be the desired behaviour in all cases.
2023-10-11 05:16:19 +02:00
Priority: 128
Add /etc/skel templating and notes adjacent to kanidm-unixd and packaging (#1113)
2022-11-04 00:49:11 +01:00
Auth-Type: Primary
Auth:
fix: PAM on Debian, enable use_first_pass by default (#3326) Since we use Debian's PAM autoconf, pam_unix isn't disabled and remains active. This means pam_unix triggers first and pam_kanidm should use the password it already tried to match to a local user. This change also moves the postinst hook for PAM config correctly to the libpam-kanidm package, since that's the one that delivers the config that needs a reinstall!
2024-12-31 23:40:14 +01:00
[success=end new_authtok_reqd=done default=ignore] pam_kanidm.so ignore_unknown_user use_first_pass
Add /etc/skel templating and notes adjacent to kanidm-unixd and packaging (#1113)
2022-11-04 00:49:11 +01:00
Account-Type: Primary
Account:
[success=end new_authtok_reqd=done default=ignore] pam_kanidm.so ignore_unknown_user
Session-Type: Additional
Session:
optional pam_kanidm.so
Password-Type: Additional
Password:
optional pam_kanidm.so
Reference in a new issue Copy permalink