hotfix(sessionbroker): add PAM configurationn

team-unstablers · Jul 24, 2022 · ac92095 · ac92095
1 parent 5354c61
commit ac92095
Show file tree

Hide file tree

Showing 2 changed files with 14 additions and 0 deletions.
diff --git a/.gitignore b/.gitignore
@@ -310,3 +310,5 @@ Dependencies/
 **/xcshareddata/WorkspaceSettings.xcsettings
 
 # End of https://www.toptal.com/developers/gitignore/api/macos,objective-c,swift,appcode,xcode,c++
+
+!pam.d/

diff --git a/sessionbroker/pam.d/ulalaca-sessionbroker b/sessionbroker/pam.d/ulalaca-sessionbroker
@@ -0,0 +1,12 @@
+# ulalaca-sessionbroker: auth account password session
+# based on Apple's sshd PAM configuration
+auth       optional       pam_krb5.so use_kcminit
+auth       optional       pam_ntlm.so try_first_pass
+auth       optional       pam_mount.so try_first_pass
+auth       required       pam_opendirectory.so try_first_pass
+account    required       pam_nologin.so
+account    required       pam_sacl.so sacl_service=ssh
+account    required       pam_opendirectory.so
+password   required       pam_opendirectory.so
+session    required       pam_launchd.so
+session    optional       pam_mount.so
Original file line number	Diff line number	Diff line change
Expand Up		@@ -310,3 +310,5 @@ Dependencies/
		**/xcshareddata/WorkspaceSettings.xcsettings

		# End of https://www.toptal.com/developers/gitignore/api/macos,objective-c,swift,appcode,xcode,c++

		!pam.d/
Expand Down