summaryrefslogtreecommitdiff
path: root/data/pam-redhat/gdm-smartcard.pam
blob: d5ac1fab4ae033273c4a501c0bb9cc277a685f20 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
# Sample PAM file for doing smartcard authentication.
# Distros should replace this with what makes sense for them.
auth        required      pam_env.so
auth        [success=done ignore=ignore default=die] pam_pkcs11.so wait_for_card card_only
auth        requisite     pam_succeed_if.so uid >= 500 quiet
auth        required      pam_deny.so

account     required      pam_unix.so
account     sufficient    pam_localuser.so
account     sufficient    pam_succeed_if.so uid < 500 quiet
account     required      pam_permit.so

password    optional      pam_pkcs11.so
password    requisite     pam_cracklib.so try_first_pass retry=3 type=

session     optional      pam_keyinit.so revoke
session     required      pam_limits.so
session     required      pam_unix.so