CVS commit: src/etc/pam.d

["Taylor R Campbell" <riastradh%netbsd.org@localhost>]

Module Name:    src
Committed By:   riastradh
Date:           Tue Jun 20 22:00:00 UTC 2023

Modified Files:
        src/etc/pam.d: display_manager ftpd sshd su system

Log Message:
pam: Disable pam_krb5, pam_ksu by default.

These are not useful unless you also set up /etc/krb5.conf and a
keytab for the host from the Kerberos KDC.  But having them enabled
by default means that creating /etc/krb5.conf just to enable use of
Kerberos for _client-side_ single sign-on creates usability issues.

As proposed on tech-security:
https://mail-index.netbsd.org/tech-security/2023/06/16/msg001160.html


To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.6 src/etc/pam.d/display_manager
cvs rdiff -u -r1.7 -r1.8 src/etc/pam.d/ftpd
cvs rdiff -u -r1.9 -r1.10 src/etc/pam.d/sshd
cvs rdiff -u -r1.8 -r1.9 src/etc/pam.d/su src/etc/pam.d/system

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.