summaryrefslogtreecommitdiffstats
path: root/etc/pam.d/su
blob: f0f833d8dd48186d3445ab146e425b5529aa8953 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
#
# $FreeBSD$
#
# PAM configuration for the "su" service
#

# auth
auth		sufficient	pam_rootok.so	no_warn
auth		sufficient	pam_self.so	no_warn
auth		requisite	pam_wheel.so	no_warn auth_as_self noroot_ok
#auth		sufficient	pam_kerberosIV.so	no_warn
#auth		sufficient	pam_krb5.so	no_warn try_first_pass auth_as_self
auth		sufficient	pam_opie.so	no_warn no_fake_prompts
auth		requisite	pam_opieaccess.so	no_warn
#auth		required	pam_ssh.so	no_warn try_first_pass
auth		required	pam_unix.so	no_warn try_first_pass nullok

# account
#account	required	pam_kerberosIV.so
#account	required	pam_krb5.so
account		required	pam_unix.so

# session
#session	required	pam_kerberosIV.so
#session	required	pam_krb5.so
#session	required	pam_ssh.so
session		required	pam_unix.so

# password
password	required	pam_permit.so


# If you want a "WHEELSU"-type su(1), then comment out the
# above, and uncomment the entries below.
## auth
#auth		sufficient	pam_rootok.so	no_warn
##auth		sufficient	pam_kerberosIV.so	no_warn
##auth		sufficient	pam_krb5.so	no_warn
#auth		required	pam_opie.so	no_warn auth_as_self no_fake_prompts
#auth		required	pam_unix.so	no_warn try_first_pass auth_as_self

## account
##account	required	pam_kerberosIV.so
##account	required	pam_krb5.so
#account	required	pam_unix.so

## session
##session	required	pam_kerberosIV.so
##session	required	pam_krb5.so
##session	required	pam_ssh.so
#session	required	pam_unix.so

## password
#password	required	pam_permit.so
OpenPOWER on IntegriCloud