1*219cf81bSBrad Davis# 2*219cf81bSBrad Davis# $FreeBSD$ 3*219cf81bSBrad Davis# 4*219cf81bSBrad Davis# System-wide defaults 5*219cf81bSBrad Davis# 6*219cf81bSBrad Davis 7*219cf81bSBrad Davis# auth 8*219cf81bSBrad Davisauth sufficient pam_opie.so no_warn no_fake_prompts 9*219cf81bSBrad Davisauth requisite pam_opieaccess.so no_warn allow_local 10*219cf81bSBrad Davis#auth sufficient pam_krb5.so no_warn try_first_pass 11*219cf81bSBrad Davis#auth sufficient pam_ssh.so no_warn try_first_pass 12*219cf81bSBrad Davisauth required pam_unix.so no_warn try_first_pass nullok 13*219cf81bSBrad Davis 14*219cf81bSBrad Davis# account 15*219cf81bSBrad Davis#account required pam_krb5.so 16*219cf81bSBrad Davisaccount required pam_login_access.so 17*219cf81bSBrad Davisaccount required pam_unix.so 18*219cf81bSBrad Davis 19*219cf81bSBrad Davis# session 20*219cf81bSBrad Davis#session optional pam_ssh.so want_agent 21*219cf81bSBrad Davissession required pam_lastlog.so no_fail 22*219cf81bSBrad Davis 23*219cf81bSBrad Davis# password 24*219cf81bSBrad Davis#password sufficient pam_krb5.so no_warn try_first_pass 25*219cf81bSBrad Davispassword required pam_unix.so no_warn try_first_pass 26