f86e743798
Properties 'Password:' and 'Password-Initial:' are intentionally removed from /usr/share/pam-configs/yourdev because changing a remote password from the host using standard commands does not work in the Orange environment : it changes the password in the Active Directory backend, but not in the Gassi backend (they are not synchronized), and you end up with two active passwords: the new one for kinit, IMAP, SMTP, SMB, etc. and the old one for all websites from MonSI ... With this configuration, you must use first the 'mot de passe attitude' website to change your AD/Gassi password, and then the command `passwd` to synchronize your local password.
25 lines
790 B
Plaintext
25 lines
790 B
Plaintext
Name: Yourdev authentication (SSSD)
|
|
Default: no
|
|
Priority: 512
|
|
Conflicts: sss
|
|
|
|
Auth-Type: Primary
|
|
Auth:
|
|
[success=end default=ignore] pam_sss.so use_first_pass
|
|
Auth-Initial:
|
|
[success=end default=ignore] pam_sss.so forward_pass
|
|
Account-Type: Additional
|
|
Account:
|
|
sufficient pam_localuser.so
|
|
[default=bad success=ok user_unknown=ignore] pam_sss.so
|
|
Session-Type: Additional
|
|
Session-Interactive-Only: yes
|
|
Session:
|
|
optional pam_sss.so
|
|
|
|
# properties 'Password:' and 'Password-Initial:' intentionally removed
|
|
# here because changing a remote password from the host using standard
|
|
# commands does not work in the Orange environment. You must use first
|
|
# the 'mot de passe attitude' website to change your AD/Gassi password,
|
|
# and then the command `passwd` to synchronize your local password.
|