1*219cf81bSBrad Davis# 2*219cf81bSBrad Davis# $FreeBSD$ 3*219cf81bSBrad Davis# 4*219cf81bSBrad Davis# PAM configuration for the "sshd" service 5*219cf81bSBrad Davis# 6*219cf81bSBrad Davis 7*219cf81bSBrad Davis# auth 8*219cf81bSBrad Davisauth sufficient pam_opie.so no_warn no_fake_prompts 9*219cf81bSBrad Davisauth requisite pam_opieaccess.so no_warn allow_local 10*219cf81bSBrad Davis#auth sufficient pam_krb5.so no_warn try_first_pass 11*219cf81bSBrad Davis#auth sufficient pam_ssh.so no_warn try_first_pass 12*219cf81bSBrad Davisauth required pam_unix.so no_warn try_first_pass 13*219cf81bSBrad Davis 14*219cf81bSBrad Davis# account 15*219cf81bSBrad Davisaccount required pam_nologin.so 16*219cf81bSBrad Davis#account required pam_krb5.so 17*219cf81bSBrad Davisaccount required pam_login_access.so 18*219cf81bSBrad Davisaccount required pam_unix.so 19*219cf81bSBrad Davis 20*219cf81bSBrad Davis# session 21*219cf81bSBrad Davis#session optional pam_ssh.so want_agent 22*219cf81bSBrad Davissession required pam_permit.so 23*219cf81bSBrad Davis 24*219cf81bSBrad Davis# password 25*219cf81bSBrad Davis#password sufficient pam_krb5.so no_warn try_first_pass 26*219cf81bSBrad Davispassword required pam_unix.so no_warn try_first_pass 27