История изменений
Исправление Cyril, (текущая версия) :
auth sufficient pam_unix.so try_first_pass broken_shadow likeauth nullok
auth optional pam_permit.so
#auth sufficient pam_ldap.so use_first_pass
auth sufficient pam_winbind.so cached_login use_first_pass
auth sufficient pam_krb5.so use_first_pass
auth required pam_env.so
account sufficient pam_unix.so broken_shadow
account sufficient pam_localuser.so
account [default=bad success=ok user_unknown=ignore] pam_winbind.so cached_login
#account sufficient pam_ldap.so
account required pam_permit.so
password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
password sufficient pam_unix.so use_authtok nullok sha512 shadow
password optional pam_permit.so
#password sufficient pam_winbind.so
password sufficient pam_krb5.so
#password sufficient pam_ldap.so
password required pam_deny.so
session required pam_limits.so
session optional pam_permit.so
session optional pam_mkhomedir.so
session required pam_env.so
session required pam_unix.so
Исходная версия Cyril, :
auth sufficient pam_unix.so try_first_pass broken_shadow likeauth nullok
auth optional pam_permit.so
#auth sufficient pam_ldap.so use_first_pass
auth sufficient pam_winbind.so cached_login use_first_pass
auth sufficient pam_krb5.so use_first_pass
auth required pam_env.so
account sufficient pam_unix.so broken_shadow
account sufficient pam_localuser.so
account [default=bad success=ok user_unknown=ignore] pam_winbind.so cached_login
#account sufficient pam_ldap.so
account required pam_permit.so
password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
password sufficient pam_unix.so use_authtok nullok sha512 shadow
password optional pam_permit.so
#password sufficient pam_winbind.so
password sufficient pam_krb5.so
#password sufficient pam_ldap.so
password required pam_deny.so
session required pam_limits.so
#session optional pam_permit.so
session optional pam_mkhomedir.so
session required pam_env.so
session required pam_unix.so