From: Matthijs Kooijman <matthijs@stdin.nl>
Date: Tue, 30 Dec 2008 23:00:45 +0000 (+0100)
Subject: pam: Let pam.d/cron include common-account.
X-Git-Url: https://git.stderr.nl/gitweb?p=matthijs%2Fservers%2Fdrsnuggles.git;a=commitdiff_plain;h=101c70d3c1375d6a434f87465bdba6722ad764ed

pam: Let pam.d/cron include common-account.

The changes to common-account make the custom account section of
pam.d/cron unneeded.
---

diff --git a/etc/pam.d/cron b/etc/pam.d/cron
index 938d30f..d85f413 100644
--- a/etc/pam.d/cron
+++ b/etc/pam.d/cron
@@ -2,15 +2,13 @@
 # The PAM configuration file for the cron daemon
 #
 
+# cron uses pam_set_cred so it needs a working auth section. It does not do
+# any other real authentication.
 auth          sufficient          pam_unix.so
-@include      common-auth
 
-# This is required instead of sufficient, since pam_unix mostly does checks
-# based on NSS, so this will also work for ldap users.
-account       required          pam_unix.so
-# We use a custom control spec so we won't fail on user_unknown special
-account       [success=ok new_authtok_reqd=ok user_unknown=ignore ignore=ignore default=bad] pam_ldap.so
+@include      common-auth
 
+@include      common-account
 
 @include      common-session