|
 |
1756dc |
From 9764ce2873a05ec9e81c6979177122f9846a9ee2 Mon Sep 17 00:00:00 2001
|
|
|
1756dc |
From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina@redhat.com>
|
|
|
1756dc |
Date: Thu, 13 Sep 2018 14:30:55 +0200
|
|
|
1756dc |
Subject: [PATCH 11/16] nis: add nis option to pam_unix in password phase
|
|
|
1756dc |
|
|
|
1756dc |
This option will allow nis users to change their passwords with 'passwd'.
|
|
|
1756dc |
|
|
|
1756dc |
Resolves:
|
|
|
1756dc |
https://github.com/pbrezina/authselect/issues/87
|
|
|
1756dc |
---
|
|
|
1756dc |
profiles/nis/password-auth | 2 +-
|
|
|
1756dc |
profiles/nis/system-auth | 2 +-
|
|
|
1756dc |
2 files changed, 2 insertions(+), 2 deletions(-)
|
|
|
1756dc |
|
|
|
1756dc |
diff --git a/profiles/nis/password-auth b/profiles/nis/password-auth
|
|
|
1756dc |
index 8f18616eb2d2c228880989ea4cce86b6588b2190..78028e19bbad3965f5232c6b6177d8780d7e1c04 100644
|
|
|
1756dc |
--- a/profiles/nis/password-auth
|
|
|
1756dc |
+++ b/profiles/nis/password-auth
|
|
|
1756dc |
@@ -14,7 +14,7 @@ account sufficient pam_succeed_if.so uid <
|
|
|
1756dc |
account required pam_permit.so
|
|
|
1756dc |
|
|
|
1756dc |
password requisite pam_pwquality.so try_first_pass local_users_only
|
|
|
1756dc |
-password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok
|
|
|
1756dc |
+password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok nis
|
|
|
1756dc |
password required pam_deny.so
|
|
|
1756dc |
|
|
|
1756dc |
session optional pam_keyinit.so revoke
|
|
|
1756dc |
diff --git a/profiles/nis/system-auth b/profiles/nis/system-auth
|
|
|
1756dc |
index e0bc4ef2fb4efc825927d13c0ff4b0083e5134ea..2909a546a49f991128c48285fa90a1937fa03513 100644
|
|
|
1756dc |
--- a/profiles/nis/system-auth
|
|
|
1756dc |
+++ b/profiles/nis/system-auth
|
|
|
1756dc |
@@ -15,7 +15,7 @@ account sufficient pam_succeed_if.so uid <
|
|
|
1756dc |
account required pam_permit.so
|
|
|
1756dc |
|
|
|
1756dc |
password requisite pam_pwquality.so try_first_pass local_users_only
|
|
|
1756dc |
-password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok
|
|
|
1756dc |
+password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok nis
|
|
|
1756dc |
password required pam_deny.so
|
|
|
1756dc |
|
|
|
1756dc |
session optional pam_keyinit.so revoke
|
|
|
1756dc |
--
|
|
|
1756dc |
2.17.1
|
|
|
1756dc |
|