From f6e52e5b96c20426687bc8041b171c9b788d7910 Mon Sep 17 00:00:00 2001 From: Sam James Date: Sun, 28 Jan 2024 08:14:35 +0000 Subject: system-auth.tpl: fix sssd's pam_deny Closes: https://bugs.gentoo.org/922918 Signed-off-by: Sam James --- templates/system-auth.tpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl index 4065e89..9a274a4 100644 --- a/templates/system-auth.tpl +++ b/templates/system-auth.tpl @@ -31,7 +31,7 @@ auth sufficient pam_sss.so forward_pass {{ debug|default('', true) }} auth optional pam_cap.so {% endif %} {% if sssd %} -auth sufficient pam_deny.so +auth required pam_deny.so {% endif %} {% if krb5 %} account [success=2 default=ignore] pam_krb5.so {{ krb5_params }} -- cgit v1.2.3-65-gdbad