commit: de5f97873c345b69c44df5a9d06fcd69ee6c5ccf
Author: Mikle Kolyada <zlogene <AT> gentoo <DOT> org>
AuthorDate: Wed Oct 28 19:24:04 2020 +0000
Commit: Mikle Kolyada <zlogene <AT> gentoo <DOT> org>
CommitDate: Wed Oct 28 19:24:04 2020 +0000
URL: https://gitweb.gentoo.org/proj/pambase.git/commit/?id=de5f9787
fix number of jumps when pam_krb5 used
Signed-off-by: Mikle Kolyada <zlogene <AT> gentoo.org>
templates/system-auth.tpl | 2 +-
templates/system-login.tpl | 1 -
2 files changed, 1 insertion(+), 2 deletions(-)
diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl
index 6edba8d..6964e05 100644
--- a/templates/system-auth.tpl
+++ b/templates/system-auth.tpl
@@ -4,7 +4,7 @@ auth sufficient pam_ssh.so
{% endif %}
{% if krb5 %}
-auth [success=4 default=ignore] pam_krb5.so {{ krb5_params }}
+auth [success=3 default=ignore] pam_krb5.so {{ krb5_params }}
{% endif %}
auth requisite pam_faillock.so preauth
diff --git a/templates/system-login.tpl b/templates/system-login.tpl
index 6a0d544..0c60bb6 100644
--- a/templates/system-login.tpl
+++ b/templates/system-login.tpl
@@ -5,7 +5,6 @@ auth include system-auth
account required pam_access.so {{ debug|default('',
true) }}
account required pam_nologin.so
account include system-auth
-account required pam_faillock.so
password include system-auth
session optional pam_loginuid.so