История изменений
Исправление tip78, (текущая версия) :
в /etc/pam.d на удалённом хосте:
grep succeed *
fingerprint-auth:account sufficient pam_succeed_if.so uid < 1000 quiet
fingerprint-auth:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
fingerprint-auth-ac:account sufficient pam_succeed_if.so uid < 1000 quiet
fingerprint-auth-ac:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
password-auth:auth requisite pam_succeed_if.so uid >= 1000 quiet_success
password-auth:account sufficient pam_succeed_if.so uid < 1000 quiet
password-auth:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
password-auth-ac:auth requisite pam_succeed_if.so uid >= 1000 quiet_success
password-auth-ac:account sufficient pam_succeed_if.so uid < 1000 quiet
password-auth-ac:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
postlogin:session [success=1 default=ignore] pam_succeed_if.so service !~ gdm* service !~ su* quiet
postlogin-ac:session [success=1 default=ignore] pam_succeed_if.so service !~ gdm* service !~ su* quiet
smartcard-auth:account sufficient pam_succeed_if.so uid < 1000 quiet
smartcard-auth:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
smartcard-auth-ac:account sufficient pam_succeed_if.so uid < 1000 quiet
smartcard-auth-ac:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
su:account sufficient pam_succeed_if.so uid = 0 use_uid quiet
system-auth:auth requisite pam_succeed_if.so uid >= 1000 quiet_success
system-auth:account sufficient pam_succeed_if.so uid < 1000 quiet
system-auth:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
system-auth-ac:auth requisite pam_succeed_if.so uid >= 1000 quiet_success
system-auth-ac:account sufficient pam_succeed_if.so uid < 1000 quiet
system-auth-ac:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
Исходная версия tip78, :
в /etc/pam.d:
grep succeed *
fingerprint-auth:account sufficient pam_succeed_if.so uid < 1000 quiet
fingerprint-auth:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
fingerprint-auth-ac:account sufficient pam_succeed_if.so uid < 1000 quiet
fingerprint-auth-ac:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
password-auth:auth requisite pam_succeed_if.so uid >= 1000 quiet_success
password-auth:account sufficient pam_succeed_if.so uid < 1000 quiet
password-auth:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
password-auth-ac:auth requisite pam_succeed_if.so uid >= 1000 quiet_success
password-auth-ac:account sufficient pam_succeed_if.so uid < 1000 quiet
password-auth-ac:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
postlogin:session [success=1 default=ignore] pam_succeed_if.so service !~ gdm* service !~ su* quiet
postlogin-ac:session [success=1 default=ignore] pam_succeed_if.so service !~ gdm* service !~ su* quiet
smartcard-auth:account sufficient pam_succeed_if.so uid < 1000 quiet
smartcard-auth:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
smartcard-auth-ac:account sufficient pam_succeed_if.so uid < 1000 quiet
smartcard-auth-ac:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
su:account sufficient pam_succeed_if.so uid = 0 use_uid quiet
system-auth:auth requisite pam_succeed_if.so uid >= 1000 quiet_success
system-auth:account sufficient pam_succeed_if.so uid < 1000 quiet
system-auth:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
system-auth-ac:auth requisite pam_succeed_if.so uid >= 1000 quiet_success
system-auth-ac:account sufficient pam_succeed_if.so uid < 1000 quiet
system-auth-ac:session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid