From 291d3ea64cc30d46281334d41934a41d508356f5 Mon Sep 17 00:00:00 2001
From: Diego Elio 'Flameeyes' Pettenò <flameeyes@gmail.com>
Date: Sat, 24 Jul 2010 03:49:39 +0200
Subject: Fix kerberos authentication.

---
 system-auth.in | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'system-auth.in')

diff --git a/system-auth.in b/system-auth.in
index 85ea443..eaf89a1 100644
--- a/system-auth.in
+++ b/system-auth.in
@@ -8,9 +8,11 @@ auth		sufficient	pam_ssh.so
 auth		KRB5_CONTROL	pam_krb5.so KRB5_PARAMS
 #endif
 auth		required	pam_unix.so try_first_pass LIKEAUTH nullok DEBUG
+/* This is needed to make sure that the Kerberos skip-on-success won't cause a bad jump. */
+auth		optional	pam_permit.so
  
 #if HAVE_KRB5
-auth		KRB5_CONTROL	pam_krb5.so KRB5_PARAMS
+account		KRB5_CONTROL	pam_krb5.so KRB5_PARAMS
 #endif
 account		required	pam_unix.so DEBUG
  
-- 
cgit v1.2.3-65-gdbad