On Mon, Jan 21, 2002 at 00:29:29 +0000, Mark Murray wrote:
> > "sufficient" will not works due to IGNORE assigned to AUTH_ERR reaction.
> > 
> > [default=ignore success=done auth_err=die] 
> > 
> > works.
> > 
> > Do you agree with this variant?
> 
> Eeew. It may work, but it is really a last-ditch sort of thing.

What you dislike in that way? This method fully described in pam(8).
I see no differences using short forms like

"sufficient"

or its full long analog like

"[default=ignore sucess=done new_authtok_reqd=done]"

short forms are only aliases.

> I much prefer an option that specifies the behaviour.

I not understand enough what kind of option you mean exactly, where it 
whould be and how act exactly.

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to