| 
                Last change
                  on this file since 986 was
                  423,
                  checked in by quentin, 18 years ago
           | 
        
        
          | 
            Tell users when they don't have tickets or don't exist
           | 
        
        | 
            File size:
            1009 bytes
           | 
      
      
        
  | Rev | Line |   | 
|---|
| [423] | 1 | #%PAM-1.0 | 
|---|
 | 2 | # Authentication modules | 
|---|
 | 3 |  | 
|---|
 | 4 | # If they're not root, but their user exists (success), | 
|---|
 | 5 | auth    [success=ignore ignore=ignore default=1]        pam_succeed_if.so uid > 0 | 
|---|
 | 6 | # print the "You don't have tickets" error: | 
|---|
 | 7 | auth    [success=die ignore=reset default=die]  pam_echo.so file=/etc/issue.net.no_tkt | 
|---|
 | 8 | # If !(they are root), | 
|---|
 | 9 | auth    [success=1 ignore=ignore default=ignore]        pam_succeed_if.so uid eq 0 | 
|---|
 | 10 | # print the "your account doesn't exist" error: | 
|---|
 | 11 | auth    [success=die ignore=reset default=die]  pam_echo.so file=/etc/issue.net.no_user | 
|---|
 | 12 |  | 
|---|
 | 13 | # Set environment variables: | 
|---|
 | 14 | auth       required     pam_env.so | 
|---|
 | 15 | # Use Unix authentication and succeed immediately (sufficient): | 
|---|
 | 16 | auth       sufficient   pam_unix.so try_first_pass | 
|---|
 | 17 | # If they somehow slipped through, deny: | 
|---|
 | 18 | auth       required     pam_deny.so | 
|---|
 | 19 |  | 
|---|
 | 20 | account    required     pam_nologin.so | 
|---|
 | 21 | account    include      system-auth | 
|---|
 | 22 | password   include      system-auth | 
|---|
 | 23 | session    optional     pam_keyinit.so force revoke | 
|---|
 | 24 | session    include      system-auth | 
|---|
 | 25 | session    required     pam_loginuid.so | 
|---|
       
      
      Note: See 
TracBrowser
        for help on using the repository browser.