CVS commit: [netbsd-9] src/etc/pam.d

["Martin Husemann" <martin%netbsd.org@localhost>]

Module Name:    src
Committed By:   martin
Date:           Wed Jun 21 21:47:51 UTC 2023

Modified Files:
        src/etc/pam.d [netbsd-9]: display_manager ftpd sshd su system

Log Message:
Pull up following revision(s) (requested by riastradh in ticket #1651):

        etc/pam.d/ftpd: revision 1.8
        etc/pam.d/su: revision 1.9
        etc/pam.d/system: revision 1.9
        etc/pam.d/display_manager: revision 1.6
        etc/pam.d/sshd: revision 1.10

pam: Disable pam_krb5, pam_ksu by default.

These are not useful unless you also set up /etc/krb5.conf and a
keytab for the host from the Kerberos KDC.  But having them enabled
by default means that creating /etc/krb5.conf just to enable use of
Kerberos for _client-side_ single sign-on creates usability issues.

As proposed on tech-security:
https://mail-index.netbsd.org/tech-security/2023/06/16/msg001160.html


To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.5.50.1 src/etc/pam.d/display_manager
cvs rdiff -u -r1.7 -r1.7.68.1 src/etc/pam.d/ftpd src/etc/pam.d/su
cvs rdiff -u -r1.9 -r1.9.68.1 src/etc/pam.d/sshd
cvs rdiff -u -r1.8 -r1.8.68.1 src/etc/pam.d/system

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.