freebsd-dev/etc/pam.d/gdm

#
# $FreeBSD$
#
# PAM configuration for the "gdm" service
#

# auth
auth		required	pam_nologin.so		no_warn
#auth		sufficient	pam_krb5.so		no_warn try_first_pass
#auth		sufficient	pam_ssh.so		no_warn try_first_pass
auth		required	pam_unix.so		no_warn try_first_pass

# account
#account 	required	pam_krb5.so
account		required	pam_unix.so

# session
#session 	optional	pam_ssh.so
session		required	pam_permit.so
pam.d-style configuration, auto-generated from pam.conf. Sponsored by: DARPA, NAI Labs 2001-12-05 21:06:21 +00:00			`#`
			`# $FreeBSD$`
			`#`
			`# PAM configuration for the "gdm" service`
			`#`

			`# auth`
Major cleanup & homogenization. 2003-02-10 00:50:03 +00:00			`auth required pam_nologin.so no_warn`
			`#auth sufficient pam_krb5.so no_warn try_first_pass`
			`#auth sufficient pam_ssh.so no_warn try_first_pass`
			`auth required pam_unix.so no_warn try_first_pass`
pam.d-style configuration, auto-generated from pam.conf. Sponsored by: DARPA, NAI Labs 2001-12-05 21:06:21 +00:00
			`# account`
Major cleanup & homogenization. 2003-02-10 00:50:03 +00:00			`#account required pam_krb5.so`
Awright, egg on my face. I should have taken more time with this. The conversion script generated the wrong format, so the configuration files didn't actually work. Good thing I hadn't thrown the switch yet... Sponsored by: DARPA, NAI Labs (but the f***ups are all mine) 2001-12-05 21:26:00 +00:00			`account required pam_unix.so`
pam.d-style configuration, auto-generated from pam.conf. Sponsored by: DARPA, NAI Labs 2001-12-05 21:06:21 +00:00
			`# session`
Major cleanup & homogenization. 2003-02-10 00:50:03 +00:00			`#session optional pam_ssh.so`
xdm plays horrid tricks with PAM, and dumps core if it's allowed to call pam_lastlog, so add a dummy session chain to avoid using the one from pam.d/other. I assume gdm does something similar, so give it a dummy session chain as well. Sponsored by: DARPA, NAI Labs. 2002-05-02 05:00:40 +00:00			`session required pam_permit.so`