crans/crans_bcfg2
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

[pam.d] minimum_uid à 500.

Browse source
This commit is contained in:
Pierre-Elliott Bécue 2014-09-17 17:35:50 +02:00
parent f0cd40a6f1
commit 4b2fc7f599
4 changed files with 4 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

2
Python/etc/pam.d/common-account
View file

@ -34,5 +34,5 @@ else:
@account required pam_permit.so @account required pam_permit.so
@# and here are more per-package modules (the "Additional" block) @# and here are more per-package modules (the "Additional" block)
if has("ldap"): if has("ldap"):
print "account [success=ok new_authtok_reqd=done ignore=ignore user_unknown=ignore authinfo_unavail=ignore default=bad] %s minimum_uid=1000" % pam_module print "account [success=ok new_authtok_reqd=done ignore=ignore user_unknown=ignore authinfo_unavail=ignore default=bad] %s minimum_uid=500" % pam_module
@# end of pam-auth-update config @# end of pam-auth-update config

2
Python/etc/pam.d/common-auth
View file

@ -26,7 +26,7 @@ else:
@# here are the per-package modules (the "Primary" block) @# here are the per-package modules (the "Primary" block)
if has('ldap'): if has('ldap'):
print "auth [success=2 default=ignore] pam_unix.so nullok_secure" print "auth [success=2 default=ignore] pam_unix.so nullok_secure"
print "auth [success=1 default=ignore] %s minimum_uid=1000 use_first_pass" % pam_module print "auth [success=1 default=ignore] %s minimum_uid=500 use_first_pass" % pam_module
else: else:
print "auth [success=1 default=ignore] pam_unix.so nullok_secure" print "auth [success=1 default=ignore] pam_unix.so nullok_secure"
@# here's the fallback if no module succeeds @# here's the fallback if no module succeeds

2
Python/etc/pam.d/common-password
View file

@ -45,7 +45,7 @@ pam-auth-update(8) for details.
if has('ldap'): if has('ldap'):
@password requisite pam_cracklib.so retry=3 minlen=9 dcredit=-1 ucredit=-1 lcredit=-1 ocredit=1 reject_username gecoscheck enforce_for_root difok=0 @password requisite pam_cracklib.so retry=3 minlen=9 dcredit=-1 ucredit=-1 lcredit=-1 ocredit=1 reject_username gecoscheck enforce_for_root difok=0
@password [success=2 default=ignore] pam_unix.so nullok obscure sha512 min=4 max=8 md5 try_first_pass @password [success=2 default=ignore] pam_unix.so nullok obscure sha512 min=4 max=8 md5 try_first_pass
print "password [success=1 default=ignore] %s minimum_uid=1000 ignore_unkown_user md5 try_first_pass" % pam_module print "password [success=1 default=ignore] %s minimum_uid=500 ignore_unkown_user md5 try_first_pass" % pam_module
else: else:
@password [success=1 default=ignore] pam_unix.so nullok obscure sha512 min=4 max=8 md5 try_first_pass @password [success=1 default=ignore] pam_unix.so nullok obscure sha512 min=4 max=8 md5 try_first_pass
@# here's the fallback if no module succeeds @# here's the fallback if no module succeeds

2
Python/etc/pam.d/common-session
View file

@ -34,5 +34,5 @@ else:
@# and here are more per-package modules (the "Additional" block) @# and here are more per-package modules (the "Additional" block)
@session required pam_unix.so @session required pam_unix.so
if has('ldap'): if has('ldap'):
print "session [success=ok default=ignore] %s minimum_uid=1000" % pam_module print "session [success=ok default=ignore] %s minimum_uid=500" % pam_module
@# end of pam-auth-update config @# end of pam-auth-update config