Line 44: |
Line 44: |
| In Arch, make the following changes to system-auth | | In Arch, make the following changes to system-auth |
| | | |
− | #%PAM-1.0 | + | %PAM-1.0 |
| | | |
| auth required pam_env.so | | auth required pam_env.so |
− | '''auth sufficient pam_winbind.so''' | + | auth sufficient pam_unix.so try_first_pass nullok |
− | auth required pam_unix.so try_first_pass nullok | + | auth required pam_winbind.so use_first_pass use_authtok |
| auth optional pam_permit.so | | auth optional pam_permit.so |
| | | |
− | '''account sufficient pam_winbind.so''' | + | account sufficient pam_unix.so |
− | account required pam_unix.so | + | account sufficient pam_winbind.so use_first_pass use_authtok |
| account optional pam_permit.so | | account optional pam_permit.so |
| account required pam_time.so | | account required pam_time.so |
| | | |
− | password required pam_unix.so try_first_pass nullok sha512 shadow | + | password sufficient pam_unix.so try_first_pass nullok sha512 shadow |
| + | password sufficient pam_winbind.so use_first_pass use_authtok |
| password optional pam_permit.so | | password optional pam_permit.so |
| | | |
− | '''session required pam_mkhomdir.so''' | + | session required pam_mkhomedir.so skel=/etc/skel/ umask=0022 |
− | '''session required pam_winbind.so'''
| |
| session required pam_limits.so | | session required pam_limits.so |
| session required pam_env.so | | session required pam_env.so |
− | session required pam_unix.so | + | session sufficient pam_unix.so |
| + | session sufficient pam_winbind.so use_first_pass use_authtok |
| session optional pam_permit.so | | session optional pam_permit.so |