- drop sshagentsh bcond; switch to subpackages

[packages/openssh.git] / passwd.pamd

diff --git a/passwd.pamd b/passwd.pamd
index 068c443a09cc269a034fb0bc96151309e49a9d93..4ec1f377d30586af7a7fa20c2cb583dfa49e452d 100644 (file)
--- a/passwd.pamd
+++ b/passwd.pamd
@@ -1,6 +1,9 @@
 #%PAM-1.0
-auth       required    /lib/security/pam_pwdb.so md5 shadow 
-account    required    /lib/security/pam_pwdb.so
-password   required    /lib/security/pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
-password   required    /lib/security/pam_pwdb.so md5 shadow use_authtok
-password   required    /lib/security/pam_make.so /var/db
+auth           required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist onerr=succeed
+auth           required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist.passwd onerr=succeed
+auth           required        pam_unix.so
+account                required        pam_unix.so
+# password      [success=1 ignore=reset abort=die default=bad] pam_pwgen.so upper=1 digit=1
+password       required        pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
+password       required        pam_unix.so md5 shadow use_authtok
+password       required        pam_exec.so failok seteuid /usr/bin/make -C /var/db