integ/config-files/pam-config/files/common-session
zhipengl 2bd19e3f8f Refactor patches for pam package
Use pam-config package to package config files for pam package.
We can remove related patch of pam and use RPM instead of SRPM
for pam.

Deployment test and ping test between VMs pass
Config files check pass.

Story: 2003768
Task: 27589
Depends-on: https://review.openstack.org/#/c/617454/

Change-Id: Ib19aa8ef023c184c7dcf0e4086adb516be0d947d
Signed-off-by: zhipengl <zhipengs.liu@intel.com>
2018-11-20 18:21:35 +08:00

22 lines
1.0 KiB
Plaintext
Executable File

#
# /etc/pam.d/common-session - session-related modules common to all services
#
# This file is included from other service-specific PAM config files,
# and should contain a list of modules that define tasks to be performed
# at the start and end of sessions of *any* kind (both interactive and
# non-interactive).
#
# here are the per-package modules (the "Primary" block)
session [default=1] pam_permit.so
# here's the fallback if no module succeeds
session requisite pam_deny.so
# prime the stack with a positive return value if there isn't one already;
# this avoids us returning an error just because nothing sets a success code
# since the modules above will each just jump around
session required pam_permit.so
# and here are more per-package modules (the "Additional" block)
session [success=1 new_authtok_reqd=done default=ignore] pam_unix.so
session [success=ok new_authtok_reqd=done default=bad] pam_ldap.so
session required pam_mkhomedir.so umask=0022 skel=/etc/skel