On Sat, Nov 14, 2009 at 04:31:48PM -0500, Michael Stone wrote:
> > auth    [success=1 default=ignore]      pam_unix.so nullok_secure
> > auth    requisite                       pam_deny.so
> >
> >You can guess what happens when someone blindly shoves pam_opie in
> >there.
> 
> Nope, please explain more specifically. I've never used that syntax.

It was a learning experience for me as well.  Basically, it means "skip
the next module on success".  By inserting pam_opie between the two,
pam_deny then moves one step down, and becomes no longer optional,
therefore locking you out.


-- 
I'd crawl over an acre of 'Visual This++' and 'Integrated Development
That' to get to gcc, Emacs, and gdb.  Thank you.
                -- Vance Petree, Virginia Power



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to