mirror of
https://github.com/kanidm/kanidm.git
synced 2025-02-23 20:47:01 +01:00
c66a401b31
`pam_kanidm` doesn't set AUTHTOK after reading from user input, so modules down the stack will have to ask for passwords redundantly. This is only a workaround, and might not be the desired behaviour in all cases.
20 lines
425 B
Plaintext
20 lines
425 B
Plaintext
Name: Kanidm Authentication
|
|
Default: yes
|
|
Priority: 128
|
|
|
|
Auth-Type: Primary
|
|
Auth:
|
|
[success=end new_authtok_reqd=done default=ignore] pam_kanidm.so ignore_unknown_user
|
|
|
|
Account-Type: Primary
|
|
Account:
|
|
[success=end new_authtok_reqd=done default=ignore] pam_kanidm.so ignore_unknown_user
|
|
|
|
Session-Type: Additional
|
|
Session:
|
|
optional pam_kanidm.so
|
|
|
|
Password-Type: Additional
|
|
Password:
|
|
optional pam_kanidm.so
|