LINUX.ORG.RU

История изменений

Исправление tip78, (текущая версия) :

в /etc/pam.d на удалённом хосте:

grep succeed *

fingerprint-auth:account     sufficient    pam_succeed_if.so uid < 1000 quiet
fingerprint-auth:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
fingerprint-auth-ac:account     sufficient    pam_succeed_if.so uid < 1000 quiet
fingerprint-auth-ac:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
password-auth:auth        requisite     pam_succeed_if.so uid >= 1000 quiet_success
password-auth:account     sufficient    pam_succeed_if.so uid < 1000 quiet
password-auth:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
password-auth-ac:auth        requisite     pam_succeed_if.so uid >= 1000 quiet_success
password-auth-ac:account     sufficient    pam_succeed_if.so uid < 1000 quiet
password-auth-ac:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
postlogin:session     [success=1 default=ignore] pam_succeed_if.so service !~ gdm* service !~ su* quiet
postlogin-ac:session     [success=1 default=ignore] pam_succeed_if.so service !~ gdm* service !~ su* quiet
smartcard-auth:account     sufficient    pam_succeed_if.so uid < 1000 quiet
smartcard-auth:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
smartcard-auth-ac:account     sufficient    pam_succeed_if.so uid < 1000 quiet
smartcard-auth-ac:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
su:account              sufficient      pam_succeed_if.so uid = 0 use_uid quiet
system-auth:auth        requisite     pam_succeed_if.so uid >= 1000 quiet_success
system-auth:account     sufficient    pam_succeed_if.so uid < 1000 quiet
system-auth:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
system-auth-ac:auth        requisite     pam_succeed_if.so uid >= 1000 quiet_success
system-auth-ac:account     sufficient    pam_succeed_if.so uid < 1000 quiet
system-auth-ac:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid

Исходная версия tip78, :

в /etc/pam.d:

grep succeed *

fingerprint-auth:account     sufficient    pam_succeed_if.so uid < 1000 quiet
fingerprint-auth:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
fingerprint-auth-ac:account     sufficient    pam_succeed_if.so uid < 1000 quiet
fingerprint-auth-ac:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
password-auth:auth        requisite     pam_succeed_if.so uid >= 1000 quiet_success
password-auth:account     sufficient    pam_succeed_if.so uid < 1000 quiet
password-auth:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
password-auth-ac:auth        requisite     pam_succeed_if.so uid >= 1000 quiet_success
password-auth-ac:account     sufficient    pam_succeed_if.so uid < 1000 quiet
password-auth-ac:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
postlogin:session     [success=1 default=ignore] pam_succeed_if.so service !~ gdm* service !~ su* quiet
postlogin-ac:session     [success=1 default=ignore] pam_succeed_if.so service !~ gdm* service !~ su* quiet
smartcard-auth:account     sufficient    pam_succeed_if.so uid < 1000 quiet
smartcard-auth:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
smartcard-auth-ac:account     sufficient    pam_succeed_if.so uid < 1000 quiet
smartcard-auth-ac:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
su:account              sufficient      pam_succeed_if.so uid = 0 use_uid quiet
system-auth:auth        requisite     pam_succeed_if.so uid >= 1000 quiet_success
system-auth:account     sufficient    pam_succeed_if.so uid < 1000 quiet
system-auth:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
system-auth-ac:auth        requisite     pam_succeed_if.so uid >= 1000 quiet_success
system-auth-ac:account     sufficient    pam_succeed_if.so uid < 1000 quiet
system-auth-ac:session     [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid