[src/trunk]: src/etc/pam.d use the ksu module not the krb one. Do kerberos au...

[christos <christos%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/e09b97e83bd1
branches:  trunk
changeset: 574485:e09b97e83bd1
user:      christos <christos%NetBSD.org@localhost>
date:      Tue Mar 01 16:28:46 2005 +0000

description:
use the ksu module not the krb one. Do kerberos authentication first.

diffstat:

 etc/pam.d/su |  5 +++--
 1 files changed, 3 insertions(+), 2 deletions(-)

diffs (21 lines):

diff -r 158473462c9c -r e09b97e83bd1 etc/pam.d/su
--- a/etc/pam.d/su      Tue Mar 01 16:27:52 2005 +0000
+++ b/etc/pam.d/su      Tue Mar 01 16:28:46 2005 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: su,v 1.4 2005/02/27 03:40:14 thorpej Exp $
+# $NetBSD: su,v 1.5 2005/03/01 16:28:46 christos Exp $
 #
 # PAM configuration for the "su" service
 #
@@ -6,9 +6,10 @@
 # auth
 auth           sufficient      pam_rootok.so           no_warn
 auth           sufficient      pam_self.so             no_warn
+auth           sufficient      pam_ksu.so              no_warn try_first_pass
 auth           requisite       pam_group.so            no_warn group=wheel root_only fail_safe
 #auth          sufficient      pam_group.so            no_warn group=rootauth root_only fail_safe authenticate
-auth           include         system
+auth           required        pam_unix.so             no_warn try_first_pass nullok
 
 # account
 account                required        pam_login_access.so