Optimizing pam common-auth, preferring winbind authentication over local authentication. Should permit faster login times.

This commit is contained in:
Emiliano Vavassori 2015-07-30 12:16:08 +02:00
parent 2ba3d76897
commit fe9a76ec03
1 changed files with 23 additions and 24 deletions

View File

@ -7,30 +7,29 @@
# common-auth
#- name: 'common-auth: modifica pam_unix'
# replace:
# dest: /etc/pam.d/common-auth
# regexp: '^.*pam_unix\.so.*nullok_secure$'
# replace: 'auth [success=1 default=ignore] pam_unix.so nullok_secure use_first_pass'
# backup: yes
# sudo: yes
#
#- name: 'common-auth: aggiunta pam_winbind'
# lineinfile:
# dest: /etc/pam.d/common-auth
# regexp: '^auth.*pam_winbind\.so$'
# insertbefore: '^auth.*pam_unix\.so'
# line: 'auth [success=2 default=ignore] pam_winbind.so'
# state: present
# sudo: yes
#
#- name: 'common-auth: rimuovo config auto pam_winbind'
# lineinfile:
# dest: /etc/pam.d/common-auth
# regexp: 'pam_winbind\.so krb5'
# state: absent
# sudo: yes
#
- name: 'common-auth: modifica pam_unix'
replace:
dest: /etc/pam.d/common-auth
regexp: '^.*pam_unix\.so.*nullok_secure$'
replace: 'auth [success=1 default=ignore] pam_unix.so nullok_secure try_first_pass'
sudo: yes
- name: 'common-auth: rimuovo config auto pam_winbind'
lineinfile:
dest: /etc/pam.d/common-auth
regexp: 'pam_winbind\.so krb5'
state: absent
sudo: yes
- name: 'common-auth: aggiunta pam_winbind'
lineinfile:
dest: /etc/pam.d/common-auth
regexp: '^auth.*pam_winbind\.so$'
insertbefore: '^auth.*pam_unix\.so'
line: 'auth [success=2 default=ignore] pam_winbind.so'
state: present
sudo: yes
## common-password
#
#- name: 'common-password: configurazione pam_unix'