pam: Simplify configuration.

diff --git a/etc/pam.d/common-account b/etc/pam.d/common-account
index c2e28cb63cfba5a05ecd5a4ac3d131dea167b1b9..141d2c2efb683e57b219c132d075534e43c0f517 100644 (file)
--- a/etc/pam.d/common-account
+++ b/etc/pam.d/common-account
@@ -9,9 +9,6 @@
 # Default was:
 #account       required        pam_unix.so
 #
-# LDAP config copied from http://wiki.debian.org/LDAP/PAM
-account     required      pam_unix.so
-account     sufficient    pam_succeed_if.so uid < 1000 quiet
-account     [default=bad success=ok user_unknown=ignore] pam_ldap.so
-account     required      pam_permit.so
-
+# LDAP config based on from http://wiki.debian.org/LDAP/PAM
+account         sufficient      pam_ldap.so
+account         required        pam_unix.so

diff --git a/etc/pam.d/common-auth b/etc/pam.d/common-auth
index aa0742c2ed46b783663b8dcfb86173f7fcbe08d1..f7bce516164e4e06f124f47bf2c46dbeb9669d01 100644 (file)
--- a/etc/pam.d/common-auth
+++ b/etc/pam.d/common-auth
@@ -11,8 +11,7 @@
 # Default was:
 # auth required        pam_unix.so nullok_secure
 #
-# LDAP config copied from http://wiki.debian.org/LDAP/PAM
+# LDAP config based on from http://wiki.debian.org/LDAP/PAM
 auth    sufficient      pam_unix.so nullok_secure
-auth    requisite       pam_succeed_if.so uid >= 1000 quiet
 auth    sufficient      pam_ldap.so use_first_pass
 auth    required        pam_deny.so

diff --git a/etc/pam.d/common-password b/etc/pam.d/common-password
index 513712b467749b294b8db8a83b1424edc63e83f7..22431e9b7a743554f4bfe86c4dcad48b89e80629 100644 (file)
--- a/etc/pam.d/common-password
+++ b/etc/pam.d/common-password
@@ -24,9 +24,9 @@
 # Default was:
 # password   required   pam_unix.so nullok obscure md5
 # 
-# LDAP config copied from http://wiki.debian.org/LDAP/PAM, but with use_authtok
+# LDAP config based on from http://wiki.debian.org/LDAP/PAM, but with use_authtok
 # options removed.
-password    sufficient    pam_unix.so md5 obscure min=4 max=8 nullok try_first_pass
+password    sufficient    pam_unix.so nullok obscure md5
 password    sufficient    pam_ldap.so
 password    required      pam_deny.so
 

diff --git a/etc/pam.d/common-session b/etc/pam.d/common-session
index c6eb1960182a6be3008e79575fbf1a1890f9879f..baffea8da9e3b6039b9d1dc4e071fd62d3232a84 100644 (file)
--- a/etc/pam.d/common-session
+++ b/etc/pam.d/common-session
@@ -10,7 +10,7 @@
 #
 # session      required        pam_unix.so
 
-# LDAP config copied from http://wiki.debian.org/LDAP/PAM
+# LDAP config based on from http://wiki.debian.org/LDAP/PAM
 session     required      pam_limits.so
 session     required      pam_unix.so
 session     optional      pam_ldap.so