On Sat, Nov 14, 2009 at 04:31:48PM -0500, Michael Stone wrote: > > auth [success=1 default=ignore] pam_unix.so nullok_secure > > auth requisite pam_deny.so > > > >You can guess what happens when someone blindly shoves pam_opie in > >there. > > Nope, please explain more specifically. I've never used that syntax.
It was a learning experience for me as well. Basically, it means "skip the next module on success". By inserting pam_opie between the two, pam_deny then moves one step down, and becomes no longer optional, therefore locking you out. -- I'd crawl over an acre of 'Visual This++' and 'Integrated Development That' to get to gcc, Emacs, and gdb. Thank you. -- Vance Petree, Virginia Power -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org