ccb17c7352
With default priority (128), pam-auth-update put module pam_sss after module pam_unix in /etc/pam.d/common-auth, and then a user with a local account and local password synchronized with AD password will never be granted a Kerberos TGT on session opening.
25 lines
287 B
Bash
25 lines
287 B
Bash
#!/bin/sh
|
|
set -e
|
|
|
|
case "$1" in
|
|
remove)
|
|
pam-auth-update --package --remove yourdev || true
|
|
;;
|
|
|
|
upgrade|deconfigure)
|
|
;;
|
|
|
|
failed-upgrade)
|
|
;;
|
|
|
|
*)
|
|
echo "prerm called with unknown argument \`$1'" >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
|
|
|
|
#DEBHELPER#
|
|
|
|
exit 0
|