12 lines
437 B
Plaintext

#%PAM-1.0 -*- mode: conf-space; tab-width: 8 -*-
# First authentication factor for Kanidm-native systems
auth requisite pam_faillock.so preauth
auth [success=1 default=ignore] pam_localuser.so
auth [success=3 default=2] pam_kanidm.so
auth [sucesss=2 default=ignore] pam_unix.so try_first_pass nullok
-auth [success=1 default=ignore] pam_systemd_home.so
auth [default=die] pam_faillock.so authfail
auth optional pam_permit.so