From a21f75d8194df780f83aff0f36d270f56af7f182 Mon Sep 17 00:00:00 2001 From: Jakub Hrozek Date: Mon, 25 Feb 2019 21:48:18 +0100 Subject: [PATCH] Revert "profiles: make session pam_systemd required" This reverts commit 297f48d60dd9fe4ba3fd2bdd1bdd5276ffa557d6. --- profiles/nis/fingerprint-auth | 2 +- profiles/nis/password-auth | 2 +- profiles/nis/system-auth | 2 +- profiles/sssd/fingerprint-auth | 2 +- profiles/sssd/password-auth | 2 +- profiles/sssd/smartcard-auth | 2 +- profiles/sssd/system-auth | 2 +- profiles/winbind/fingerprint-auth | 2 +- profiles/winbind/password-auth | 2 +- profiles/winbind/system-auth | 2 +- 10 files changed, 10 insertions(+), 10 deletions(-) diff --git a/profiles/nis/fingerprint-auth b/profiles/nis/fingerprint-auth index dc9e53b..278487b 100644 --- a/profiles/nis/fingerprint-auth +++ b/profiles/nis/fingerprint-auth @@ -17,7 +17,7 @@ password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"} -session required pam_systemd.so +-session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"} session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so diff --git a/profiles/nis/password-auth b/profiles/nis/password-auth index 60781bb..2ce77fd 100644 --- a/profiles/nis/password-auth +++ b/profiles/nis/password-auth @@ -22,7 +22,7 @@ password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"} -session required pam_systemd.so +-session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"} session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so diff --git a/profiles/nis/system-auth b/profiles/nis/system-auth index 3edbf34..d1f270a 100644 --- a/profiles/nis/system-auth +++ b/profiles/nis/system-auth @@ -23,7 +23,7 @@ password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"} -session required pam_systemd.so +-session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"} session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so diff --git a/profiles/sssd/fingerprint-auth b/profiles/sssd/fingerprint-auth index 3bdaf3e..01b70f3 100644 --- a/profiles/sssd/fingerprint-auth +++ b/profiles/sssd/fingerprint-auth @@ -19,7 +19,7 @@ password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"} -session required pam_systemd.so +-session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"} session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so diff --git a/profiles/sssd/password-auth b/profiles/sssd/password-auth index fbd6647..c61630d 100644 --- a/profiles/sssd/password-auth +++ b/profiles/sssd/password-auth @@ -28,7 +28,7 @@ password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"} -session required pam_systemd.so +-session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"} session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so diff --git a/profiles/sssd/smartcard-auth b/profiles/sssd/smartcard-auth index 5ec5e1d..82e82cc 100644 --- a/profiles/sssd/smartcard-auth +++ b/profiles/sssd/smartcard-auth @@ -16,7 +16,7 @@ account required pam_permit.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"} -session required pam_systemd.so +-session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"} session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so diff --git a/profiles/sssd/system-auth b/profiles/sssd/system-auth index 2879592..d70c7da 100644 --- a/profiles/sssd/system-auth +++ b/profiles/sssd/system-auth @@ -32,7 +32,7 @@ password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"} -session required pam_systemd.so +-session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"} session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so diff --git a/profiles/winbind/fingerprint-auth b/profiles/winbind/fingerprint-auth index 9264946..0beff74 100644 --- a/profiles/winbind/fingerprint-auth +++ b/profiles/winbind/fingerprint-auth @@ -18,7 +18,7 @@ password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"} -session required pam_systemd.so +-session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"} session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so diff --git a/profiles/winbind/password-auth b/profiles/winbind/password-auth index b694bed..455add4 100644 --- a/profiles/winbind/password-auth +++ b/profiles/winbind/password-auth @@ -25,7 +25,7 @@ password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"} -session required pam_systemd.so +-session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"} session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so diff --git a/profiles/winbind/system-auth b/profiles/winbind/system-auth index 88e1c07..5b383f7 100644 --- a/profiles/winbind/system-auth +++ b/profiles/winbind/system-auth @@ -26,7 +26,7 @@ password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so session optional pam_ecryptfs.so unwrap {include if "with-ecryptfs"} -session required pam_systemd.so +-session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 {include if "with-mkhomedir"} session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so -- 2.19.2