xref: /freebsd/lib/libpam/pam.d/sshd (revision d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf)
1*219cf81bSBrad Davis#
2*219cf81bSBrad Davis#
3*219cf81bSBrad Davis# PAM configuration for the "sshd" service
4*219cf81bSBrad Davis#
5*219cf81bSBrad Davis
6*219cf81bSBrad Davis# auth
7*219cf81bSBrad Davis#auth		sufficient	pam_krb5.so		no_warn try_first_pass
8*219cf81bSBrad Davis#auth		sufficient	pam_ssh.so		no_warn try_first_pass
9*219cf81bSBrad Davisauth		required	pam_unix.so		no_warn try_first_pass
10*219cf81bSBrad Davis
11*219cf81bSBrad Davis# account
12*219cf81bSBrad Davisaccount		required	pam_nologin.so
13*219cf81bSBrad Davis#account	required	pam_krb5.so
14*219cf81bSBrad Davisaccount		required	pam_login_access.so
15*219cf81bSBrad Davisaccount		required	pam_unix.so
16*219cf81bSBrad Davis
17*219cf81bSBrad Davis# session
18*219cf81bSBrad Davis#session	optional	pam_ssh.so		want_agent
19*219cf81bSBrad Davissession		required	pam_permit.so
20*219cf81bSBrad Davis
21*219cf81bSBrad Davis# password
22*219cf81bSBrad Davis#password	sufficient	pam_krb5.so		no_warn try_first_pass
23*219cf81bSBrad Davispassword	required	pam_unix.so		no_warn try_first_pass
24