more secure sane default for pam common-auth

schisamo · Aug 18, 2011 · 9eae58f · 9eae58f
1 parent dddfa23
commit 9eae58f
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/openldap/files/default/common-auth b/openldap/files/default/common-auth
@@ -5,3 +5,5 @@
 auth       sufficient   pam_unix.so likeauth nullok_secure
 auth       sufficient   pam_ldap.so use_first_pass
 
+auth       required     pam_deny.so
+auth       required     pam_warn.so