freebsd-dev/lib/libpam/pam.d/system

#
# $FreeBSD$
#
# System-wide defaults
#

# auth
#auth		sufficient	pam_krb5.so		no_warn try_first_pass
#auth		sufficient	pam_ssh.so		no_warn try_first_pass
auth		required	pam_unix.so		no_warn try_first_pass nullok

# account
#account	required	pam_krb5.so
account		required	pam_login_access.so
account		required	pam_unix.so

# session
#session	optional	pam_ssh.so		want_agent
session		required	pam_lastlog.so		no_fail

# password
#password	sufficient	pam_krb5.so		no_warn try_first_pass
password	required	pam_unix.so		no_warn try_first_pass
Add a system policy, and have the login and su policies include it rather than duplicate it. This requires OpenPAM Dianthus, which was committed two weeks ago; installing these files on a system running a world older than June 1st, 2003 will cause login(1) and su(1) to fail. 2003-06-14 12:35:05 +00:00			`#`
			`# $FreeBSD$`
			`#`
			`# System-wide defaults`
			`#`

			`# auth`
			`#auth sufficient pam_krb5.so no_warn try_first_pass`
			`#auth sufficient pam_ssh.so no_warn try_first_pass`
			`auth required pam_unix.so no_warn try_first_pass nullok`

			`# account`
tabify MFC after: 3 weeks 2009-10-05 09:28:54 +00:00			`#account required pam_krb5.so`
Add a system policy, and have the login and su policies include it rather than duplicate it. This requires OpenPAM Dianthus, which was committed two weeks ago; installing these files on a system running a world older than June 1st, 2003 will cause login(1) and su(1) to fail. 2003-06-14 12:35:05 +00:00			`account required pam_login_access.so`
			`account required pam_unix.so`

			`# session`
tabify MFC after: 3 weeks 2009-10-05 09:28:54 +00:00			`#session optional pam_ssh.so want_agent`
Add a system policy, and have the login and su policies include it rather than duplicate it. This requires OpenPAM Dianthus, which was committed two weeks ago; installing these files on a system running a world older than June 1st, 2003 will cause login(1) and su(1) to fail. 2003-06-14 12:35:05 +00:00			`session required pam_lastlog.so no_fail`

			`# password`
			`#password sufficient pam_krb5.so no_warn try_first_pass`
			`password required pam_unix.so no_warn try_first_pass`