Hide leaking hostname on SSH password auth (#3754)

This commit is contained in:
sooslaca 2019-10-10 13:35:50 +02:00 committed by Ad Schellevis
parent 817be51986
commit 69139fcbb2

View File

@ -10,9 +10,9 @@ auth requisite pam_opieaccess.so no_warn allow_local
#auth sufficient pam_krb5.so no_warn try_first_pass
#auth sufficient pam_ssh.so no_warn try_first_pass
{% if system.disableintegratedauth|default('0') == '0' %}
auth sufficient pam_opnsense.so
auth sufficient pam_opnsense.so authtok_prompt=Password:
{% endif %}
auth required pam_unix.so no_warn try_first_pass
auth required pam_unix.so no_warn try_first_pass authtok_prompt=Password:
# account
account required pam_nologin.so