summaryrefslogtreecommitdiff
path: root/etc/pam.d/sshd
blob: aaf206c960bf0c7e56b12e43ebdfd23a058d74dc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
# $NetBSD: sshd,v 1.10 2023/06/20 22:00:00 riastradh Exp $
#
# PAM configuration for the "sshd" service
#

# auth
auth		required	pam_nologin.so	no_warn
auth		sufficient	pam_skey.so	no_warn try_first_pass
#auth		sufficient	pam_krb5.so	no_warn try_first_pass
auth		optional	pam_afslog.so	no_warn try_first_pass
# pam_ssh has potential security risks.  See pam_ssh(8).
#auth		sufficient	pam_ssh.so	no_warn try_first_pass
auth		required	pam_unix.so	no_warn try_first_pass

# account
#account	required	pam_krb5.so
account		required	pam_login_access.so
account		required	pam_unix.so

# session
# pam_ssh has potential security risks.  See pam_ssh(8).
#session	optional	pam_ssh.so
session		required	pam_permit.so

# password
#password	sufficient	pam_krb5.so	no_warn try_first_pass
password	required	pam_unix.so	no_warn try_first_pass