diff options
Diffstat (limited to 'system-session.inc')
| -rw-r--r-- | system-session.inc | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/system-session.inc b/system-session.inc index 9d4aea1..2ba6964 100644 --- a/system-session.inc +++ b/system-session.inc @@ -7,7 +7,19 @@ session required pam_env.so DEBUG #if HAVE_MKTEMP session optional pam_mktemp.so #endif + +/* Only Linux-PAM supports session chain for pam_unix; but if it were + to not support it for whatever reason, still execute pam_krb5, with + sufficient level instead. */ #if SUPPORT_UNIX_SESSION +# if HAVE_KRB5 +session KRB5_CONTROL pam_krb5.so KRB5_PARAMS +# endif session required pam_unix.so DEBUG +#else +# if HAVE_KRB5 +session sufficient pam_krb5.so KRB5_PARAMS +# endif #endif + session optional pam_permit.so |