[Mageia-sysadm] [448] pam_wheel is made to be used with su only.

[root at mageia.org]

Revision: 448
Author:   misc
Date:     2010-11-24 02:27:30 +0100 (Wed, 24 Nov 2010)
Log Message:
-----------
pam_wheel is made to be used with su only. pam_succeed_if seems to be the proper module

Modified Paths:
--------------
    puppet/modules/pam/templates/system-auth

Modified: puppet/modules/pam/templates/system-auth
===================================================================
--- puppet/modules/pam/templates/system-auth	2010-11-24 01:21:09 UTC (rev 447)
+++ puppet/modules/pam/templates/system-auth	2010-11-24 01:27:30 UTC (rev 448)
@@ -6,10 +6,10 @@
 auth    sufficient   pam_unix.so likeauth nullok try_first_pass
 auth    sufficient   pam_ldap.so use_first_pass
 <%- if access_class = 'admin' -%>
-auth    required     pam_wheel.so group=mga-sysadmin
+auth    required     pam_succeed_if.so quiet user ingroup mga-sysadmin
 <%- end -%>
 <%- if access_class = 'commiters' -%>
-auth    required     pam_wheel.so group=mga-commiters
+auth    required     pam_succeed_if.so quiet user ingroup mga-commiters
 <%- end -%>
 auth    required     pam_deny.so
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/mageia-sysadm/attachments/20101124/63abbb7c/attachment.html>