Using config management to automate pam-auth-update(8) change

Greetings, I'm using Ansible to manage Debian configurations, and am attempting to add a role to enable multi-factor auth in SSH with public keys and Duo (via libpam-duo). I almost have the configuration I want, but as part of it - once the libpam-duo package is installed - I need to enable the p

Configuration to support login restrictions in LightDM with pam_time(8)

Greetings, Debian GNU/Linux 8.3 (jessie) lightdm 1.10.3-3 lightdm-gtk-greeter 1.8.5-2 I currently have a configuration in place using pam_time(8) to enforce user login times at the Linux console (i.e. against the PAM login(1) service). This entry works in this case: # /etc/pam.d/login account r