diff options
| author | Christian Poessinger <christian@poessinger.com> | 2021-05-02 15:53:32 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2021-05-02 17:13:40 +0200 |
| commit | 0e5a90ad70edbcc6334f1737a6855d02f8ffd130 (patch) | |
| tree | e6886fa149748f4cccfcafb0353776e112641140 /src/pam-configs/radius | |
| parent | e17475f0237576c3b581daa7b8df1e48adfce8e9 (diff) | |
| download | vyos-1x-0e5a90ad70edbcc6334f1737a6855d02f8ffd130.tar.gz vyos-1x-0e5a90ad70edbcc6334f1737a6855d02f8ffd130.zip | |
radius: T3510: authenticated users must use /sbin/radius_shell as shell
Diffstat (limited to 'src/pam-configs/radius')
| -rw-r--r-- | src/pam-configs/radius | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/src/pam-configs/radius b/src/pam-configs/radius index 0e2c71e38..aaae6aeb0 100644 --- a/src/pam-configs/radius +++ b/src/pam-configs/radius @@ -3,18 +3,18 @@ Default: yes Priority: 257 Auth-Type: Primary Auth: - [default=ignore success=1] pam_succeed_if.so uid eq 1001 quiet - [default=ignore success=ignore] pam_succeed_if.so uid eq 1002 quiet + [default=ignore success=1] pam_succeed_if.so uid eq 1000 quiet + [default=ignore success=ignore] pam_succeed_if.so uid eq 1001 quiet [authinfo_unavail=ignore success=end default=ignore] pam_radius_auth.so Account-Type: Primary Account: - [default=ignore success=1] pam_succeed_if.so uid eq 1001 quiet - [default=ignore success=ignore] pam_succeed_if.so uid eq 1002 quiet + [default=ignore success=1] pam_succeed_if.so uid eq 1000 quiet + [default=ignore success=ignore] pam_succeed_if.so uid eq 1001 quiet [authinfo_unavail=ignore success=end perm_denied=bad default=ignore] pam_radius_auth.so Session-Type: Additional Session: - [default=ignore success=1] pam_succeed_if.so uid eq 1001 quiet - [default=ignore success=ignore] pam_succeed_if.so uid eq 1002 quiet + [default=ignore success=1] pam_succeed_if.so uid eq 1000 quiet + [default=ignore success=ignore] pam_succeed_if.so uid eq 1001 quiet [authinfo_unavail=ignore success=ok default=ignore] pam_radius_auth.so |