kanidm/unix_integration/pam_kanidm/debian/kanidm.pam

Name: Kanidm Authentication
Default: yes
Priority: 128

Auth-Type: Primary
Auth:
  [success=end new_authtok_reqd=done default=ignore]    pam_kanidm.so ignore_unknown_user

Account-Type: Primary
Account:
  [success=end new_authtok_reqd=done default=ignore]    pam_kanidm.so ignore_unknown_user

Session-Type: Additional
Session:
  optional      pam_kanidm.so

Password-Type: Additional
Password:
  optional      pam_kanidm.so
Add /etc/skel templating and notes adjacent to kanidm-unixd and packaging (#1113) 2022-11-04 00:49:11 +01:00			`Name: Kanidm Authentication`
			`Default: yes`
Reduce `pam_kanidm`'s priority in Debian platforms (#2209) `pam_kanidm` doesn't set AUTHTOK after reading from user input, so modules down the stack will have to ask for passwords redundantly. This is only a workaround, and might not be the desired behaviour in all cases. 2023-10-11 05:16:19 +02:00			`Priority: 128`
Add /etc/skel templating and notes adjacent to kanidm-unixd and packaging (#1113) 2022-11-04 00:49:11 +01:00
			`Auth-Type: Primary`
			`Auth:`
			`[success=end new_authtok_reqd=done default=ignore] pam_kanidm.so ignore_unknown_user`

			`Account-Type: Primary`
			`Account:`
			`[success=end new_authtok_reqd=done default=ignore] pam_kanidm.so ignore_unknown_user`

			`Session-Type: Additional`
			`Session:`
			`optional pam_kanidm.so`

			`Password-Type: Additional`
			`Password:`
			`optional pam_kanidm.so`