pam: Enable LDAP host attribute checking.

[matthijs/servers/drsnuggles.git] / etc / pam_ldap.conf

diff --git a/etc/pam_ldap.conf b/etc/pam_ldap.conf
index 45d8679f3800f7e43cd31f2a54a5250d1f379e73..671b824fb0b01efa1a06f8c3b37442238d94b3f3 100644 (file)
--- a/etc/pam_ldap.conf
+++ b/etc/pam_ldap.conf
@@ -15,3 +15,5 @@ ldap_version 3
 # Use the OpenLDAP exop extended operation to change the password. This allows
 # the server to decide on hashing algorithm, etc.
 pam_password exop
+
+pam_check_host_attr yes