Claudio Prono <[email protected]> writes:

> /etc/pam.d/common-account

> account requisite       pam_unix2.so
> account required        pam_krb5.so     use_first_pass
> ignore_unknown_principals
> account sufficient      pam_localuser.so
> account required        pam_ldap.so     use_first_pass

I have no idea what pam_localuser does, but right now if it fails the
whole authentication fails.  Are you sure that's what you want?

-- 
Russ Allbery ([email protected])             <http://www.eyrie.org/~eagle/>
_______________________________________________
OpenAFS-info mailing list
[email protected]
https://lists.openafs.org/mailman/listinfo/openafs-info

Reply via email to