- added pam_make to chfn and chsh

[packages/pwdutils.git] / chfn.pamd

diff --git a/chfn.pamd b/chfn.pamd
index b8ed8e315aa1503b9291b9c47da59a501b68e3fb..99f3a9c6b9ffb159f1d624c6b573adcf1f9cf617 100644 (file)
--- a/chfn.pamd
+++ b/chfn.pamd
@@ -1,10 +1,11 @@
 #%PAM-1.0
-auth required /lib/security/pam_listfile.so item=user sense=allow file=/etc/security/chfn onerr=fail
-auth       sufficient   /lib/security/pam_rootok.so
-auth       required    /lib/security/pam_pwdb.so md5 shadow 
-account    required    /lib/security/pam_pwdb.so
-password   required    /lib/security/pam_cracklib.so
-password   required    /lib/security/pam_pwdb.so md5 shadow use_authtok
-session    required    /lib/security/pam_pwdb.so
+auth           required        /lib/security/pam_listfile.so item=user sense=allow file=/etc/security/chfn onerr=fail
+auth           sufficient      /lib/security/pam_rootok.so
+auth           required        /lib/security/pam_unix.so
+account                required        /lib/security/pam_unix.so
+password       required        /lib/security/pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
+password       required        /lib/security/pam_unix.so md5 shadow use_authtok
+password       required        /lib/security/pam_make.so /var/db
+session                required        /lib/security/pam_unix.so