commit:     de5f97873c345b69c44df5a9d06fcd69ee6c5ccf
Author:     Mikle Kolyada <zlogene <AT> gentoo <DOT> org>
AuthorDate: Wed Oct 28 19:24:04 2020 +0000
Commit:     Mikle Kolyada <zlogene <AT> gentoo <DOT> org>
CommitDate: Wed Oct 28 19:24:04 2020 +0000
URL:        https://gitweb.gentoo.org/proj/pambase.git/commit/?id=de5f9787

fix number of jumps when pam_krb5 used

Signed-off-by: Mikle Kolyada <zlogene <AT> gentoo.org>

 templates/system-auth.tpl  | 2 +-
 templates/system-login.tpl | 1 -
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl
index 6edba8d..6964e05 100644
--- a/templates/system-auth.tpl
+++ b/templates/system-auth.tpl
@@ -4,7 +4,7 @@ auth            sufficient      pam_ssh.so
 {% endif %}
 
 {% if krb5 %}
-auth           [success=4 default=ignore]      pam_krb5.so {{ krb5_params }}
+auth           [success=3 default=ignore]      pam_krb5.so {{ krb5_params }}
 {% endif %}
 
 auth           requisite       pam_faillock.so preauth

diff --git a/templates/system-login.tpl b/templates/system-login.tpl
index 6a0d544..0c60bb6 100644
--- a/templates/system-login.tpl
+++ b/templates/system-login.tpl
@@ -5,7 +5,6 @@ auth            include         system-auth
 account                required        pam_access.so {{ debug|default('', 
true) }}
 account                required        pam_nologin.so
 account                include         system-auth
-account         required        pam_faillock.so
 
 password       include         system-auth
 session         optional        pam_loginuid.so

Reply via email to