pam.d-style configuration, auto-generated from pam.conf.

Sponsored by:	DARPA, NAI Labs

etc/pam.d/csshd

@@ -0,0 +1,8 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "csshd" service
+#
+
+# auth
+csshd	auth	required	pam_opie.so	no_warn

etc/pam.d/ftp

@@ -0,0 +1,24 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "ftp" service
+#
+
+# auth
+ftp	auth	required	pam_nologin.so	no_warn
+#ftp	auth	sufficient	pam_kerberosIV.so	no_warn
+#ftp	auth	sufficient	pam_krb5.so	no_warn
+#ftp	auth	required	pam_opie.so	no_warn
+#ftp	auth	required	pam_ssh.so	no_warn try_first_pass
+ftp	auth	required	pam_unix.so	no_warn try_first_pass
+
+# account
+#ftp	account	required	pam_kerberosIV.so
+#ftp	account	required	pam_krb5.so
+ftp	account	required	pam_unix.so
+
+# session
+#ftp	session	required	pam_kerberosIV.so
+#ftp	session	required	pam_krb5.so
+#ftp	session	required	pam_ssh.so
+ftp	session	required	pam_unix.so

etc/pam.d/ftpd

@@ -0,0 +1,24 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "ftpd" service
+#
+
+# auth
+ftpd	auth	required	pam_nologin.so	no_warn
+#ftpd	auth	sufficient	pam_kerberosIV.so	no_warn
+#ftpd	auth	sufficient	pam_krb5.so	no_warn
+#ftpd	auth	required	pam_opie.so	no_warn
+#ftpd	auth	required	pam_ssh.so	no_warn try_first_pass
+ftpd	auth	required	pam_unix.so	no_warn try_first_pass
+
+# account
+#ftpd	account	required	pam_kerberosIV.so
+#ftpd	account	required	pam_krb5.so
+ftpd	account	required	pam_unix.so
+
+# session
+#ftpd	session	required	pam_kerberosIV.so
+#ftpd	session	required	pam_krb5.so
+#ftpd	session	required	pam_ssh.so
+ftpd	session	required	pam_unix.so

etc/pam.d/gdm

@@ -0,0 +1,26 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "gdm" service
+#
+
+# auth
+gdm	auth	required	pam_nologin.so	no_warn
+#gdm	auth	sufficient	pam_kerberosIV.so	no_warn	try_first_pass
+#gdm	auth	sufficient	pam_krb5.so	no_warn	try_first_pass
+#gdm	auth	sufficient	pam_ssh.so	no_warn	try_first_pass
+gdm	auth	required	pam_unix.so	no_warn	try_first_pass
+
+# account
+#gdm	account	required	pam_kerberosIV.so
+#gdm	account	required	pam_krb5.so
+gdm	account	required	pam_unix.so
+
+# session
+#gdm	session	required	pam_kerberosIV.so
+#gdm	session	required	pam_krb5.so
+#gdm	session	required	pam_ssh.so
+gdm	session	required	pam_unix.so
+
+# password
+gdm	password required	pam_deny.so

etc/pam.d/imap

@@ -0,0 +1,11 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "imap" service
+#
+
+# auth
+#imap	auth	required	pam_nologin.so	no_warn
+#imap	auth	required	pam_opie.so	no_warn
+#imap	auth	required	pam_ssh.so	no_warn try_first_pass
+#imap	auth	required	pam_unix.so	no_warn try_first_pass

etc/pam.d/kde

@@ -0,0 +1,13 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "kde" service
+#
+
+# auth
+kde	auth	required	pam_nologin.so	no_warn
+#kde	auth	sufficient	pam_opie.so	no_warn
+#kde	auth	sufficient	pam_kerberosIV.so	no_warn try_first_pass
+#kde	auth	sufficient	pam_krb5.so	no_warn try_first_pass
+#kde	auth	required	pam_ssh.so	no_warn try_first_pass
+kde	auth	required	pam_unix.so	no_warn try_first_pass

etc/pam.d/login

@@ -0,0 +1,30 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "login" service
+#
+
+# auth
+login	auth	required	pam_nologin.so	no_warn
+#login	auth	sufficient	pam_opie.so	no_warn
+#login	auth	sufficient	pam_kerberosIV.so	no_warn try_first_pass
+#login	auth	sufficient	pam_krb5.so	no_warn try_first_pass
+#login	auth	required	pam_ssh.so	no_warn try_first_pass
+login	auth	required	pam_unix.so	no_warn try_first_pass
+
+# account
+#login	account	required	pam_kerberosIV.so
+#login	account	required	pam_krb5.so
+login	account	required	pam_unix.so
+
+# session
+#login	session	required	pam_kerberosIV.so
+#login	session	required	pam_krb5.so
+#login	session	required	pam_ssh.so
+login	session	required	pam_unix.so
+
+# password
+#login	password sufficient	pam_opie.so	no_warn
+#login	password sufficient	pam_kerberosIV.so	no_warn try_first_pass
+#login	password sufficient	pam_krb5.so	no_warn try_first_pass
+login	password required	pam_unix.so	no_warn try_first_pass

etc/pam.d/other

@@ -0,0 +1,19 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "other" service
+#
+
+# auth
+other	auth	required	pam_nologin.so	no_warn
+#other	auth	required	pam_opie.so	no_warn
+other	auth	required	pam_unix.so	no_warn try_first_pass
+
+# account
+other	account	required	pam_unix.so
+
+# session
+other	session	required	pam_unix.so
+
+# password
+other	password required	pam_deny.so

etc/pam.d/pop3

@@ -0,0 +1,11 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "pop3" service
+#
+
+# auth
+#pop3	auth	required	pam_nologin.so	no_warn
+#pop3	auth	required	pam_opie.so	no_warn
+#pop3	auth	required	pam_ssh.so	no_warn try_first_pass
+#pop3	auth	required	pam_unix.so	no_warn try_first_pass

etc/pam.d/rsh

@@ -0,0 +1,15 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "rsh" service
+#
+
+# auth
+rsh	auth	required	pam_nologin.so	no_warn
+rsh	auth	required	pam_deny.so	no_warn
+
+# account
+rsh	account	required	pam_unix.so
+
+# session
+rsh	session	required	pam_permit.so

etc/pam.d/sshd

@@ -0,0 +1,18 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "sshd" service
+#
+
+# auth
+sshd	auth	required	pam_nologin.so	no_warn
+sshd	auth	required	pam_unix.so	no_warn try_first_pass
+
+# account
+sshd	account	required	pam_unix.so
+
+# session
+sshd	session	required	pam_permit.so
+
+# password
+sshd	password required	pam_permit.so

etc/pam.d/su

@@ -0,0 +1,41 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "su" service
+#
+
+# auth
+su	auth	sufficient	pam_rootok.so	no_warn
+su	auth	requisite	pam_wheel.so	no_warn auth_as_self noroot_ok
+#su	auth	sufficient	pam_kerberosIV.so	no_warn
+#su	auth	sufficient	pam_krb5.so	no_warn try_first_pass auth_as_self
+#su	auth	required	pam_opie.so	no_warn
+#su	auth	required	pam_ssh.so	no_warn try_first_pass
+su	auth	required	pam_unix.so	no_warn try_first_pass nullok
+#su	auth	sufficient	pam_rootok.so	no_warn
+##su	auth	sufficient	pam_kerberosIV.so	no_warn
+##su	auth	sufficient	pam_krb5.so	no_warn
+#su	auth	required	pam_opie.so	no_warn auth_as_self
+#su	auth	required	pam_unix.so	no_warn try_first_pass auth_as_self
+
+# account
+#su	account	required	pam_kerberosIV.so
+#su	account	required	pam_krb5.so
+su	account	required	pam_unix.so
+##su	account	required	pam_kerberosIV.so
+##su	account	required	pam_krb5.so
+#su	account	required	pam_unix.so
+
+# session
+#su	session	required	pam_kerberosIV.so
+#su	session	required	pam_krb5.so
+#su	session	required	pam_ssh.so
+su	session	required	pam_unix.so
+##su	session	required	pam_kerberosIV.so
+##su	session	required	pam_krb5.so
+##su	session	required	pam_ssh.so
+#su	session	required	pam_unix.so
+
+# password
+su	password required	pam_permit.so
+#su	password required	pam_permit.so

etc/pam.d/telnetd

@@ -0,0 +1,12 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "telnetd" service
+#
+
+# auth
+telnetd	auth	required	pam_nologin.so	no_warn
+telnetd	auth	required	pam_unix.so	no_warn try_first_pass
+
+# account
+telnetd	account	required	pam_unix.so

etc/pam.d/xdm

@@ -0,0 +1,26 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "xdm" service
+#
+
+# auth
+xdm	auth	required	pam_nologin.so	no_warn
+#xdm	auth	sufficient	pam_kerberosIV.so	no_warn try_first_pass
+#xdm	auth	sufficient	pam_krb5.so	no_warn try_first_pass
+#xdm	auth	sufficient	pam_ssh.so	no_warn try_first_pass
+xdm	auth	required	pam_unix.so	no_warn try_first_pass
+
+# account
+#xdm	account	required	pam_kerberosIV.so
+#xdm	account	required	pam_krb5.so
+xdm	account	required	pam_unix.so
+
+# session
+#xdm	session	required	pam_kerberosIV.so
+#xdm	session	required	pam_krb5.so
+#xdm	session	required	pam_ssh.so
+xdm	session	required	pam_unix.so
+
+# password
+xdm	password required	pam_deny.so

etc/pam.d/xserver

@@ -0,0 +1,8 @@
+#
+# $FreeBSD$
+#
+# PAM configuration for the "xserver" service
+#
+
+# auth
+xserver	auth	required	pam_permit.so	no_warn