e90aa31af8
this adds openssh-server with pam support the user still has the change this settings in /etc/ssh/sshd_config: PasswordAuthentication no UsePAM yes to use pam. To avoid having two moduli files which is just static data, openssh-moduli now depends on ssh-keygen. based on patch from DkSouls Signed-off-by: Peter Wagner <tripolar@gmx.at> git-svn-id: svn://svn.openwrt.org/openwrt/packages@38494 3c298f89-4303-0410-b956-a3cf2f4a3e73
42 lines
1.4 KiB
Plaintext
42 lines
1.4 KiB
Plaintext
# PAM configuration for the Secure Shell service
|
|
|
|
# Read environment variables from /etc/environment and
|
|
# /etc/security/pam_env.conf.
|
|
auth required pam_env.so
|
|
|
|
# Skip Google Authenticator if logging in from the local network.
|
|
# auth [success=1 default=ignore] pam_access.so accessfile=/etc/security/access-sshd-local.conf
|
|
# Google Authenticator 2-step verification.
|
|
# auth requisite pam_google_authenticator.so
|
|
|
|
# Standard Un*x authentication.
|
|
auth include common-auth
|
|
|
|
# Disallow non-root logins when /etc/nologin exists.
|
|
account required pam_nologin.so
|
|
|
|
# Uncomment and edit /etc/security/access.conf if you need to set complex
|
|
# access limits that are hard to express in sshd_config.
|
|
# account required pam_access.so
|
|
|
|
# Standard Un*x authorization.
|
|
account include common-account
|
|
|
|
# Standard Un*x session setup and teardown.
|
|
session include common-session
|
|
|
|
# Print the message of the day upon successful login.
|
|
session optional pam_motd.so
|
|
|
|
# Print the status of the user's mailbox upon successful login.
|
|
session optional pam_mail.so standard noenv
|
|
|
|
# Set up user limits from /etc/security/limits.conf.
|
|
session required pam_limits.so
|
|
|
|
# Set up SELinux capabilities (need modified pam)
|
|
# session required pam_selinux.so multiple
|
|
|
|
# Standard Un*x password updating.
|
|
password include common-password
|