Module Name: src
Committed By: riastradh
Date: Tue Jun 20 22:00:00 UTC 2023
Modified Files:
src/etc/pam.d: display_manager ftpd sshd su system
Log Message:
pam: Disable pam_krb5, pam_ksu by default.
These are not useful unless you also set up /etc/krb5.conf and a
keytab for the host from the Kerberos KDC. But having them enabled
by default means that creating /etc/krb5.conf just to enable use of
Kerberos for _client-side_ single sign-on creates usability issues.
As proposed on tech-security:
https://mail-index.netbsd.org/tech-security/2023/06/16/msg001160.html
To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.6 src/etc/pam.d/display_manager
cvs rdiff -u -r1.7 -r1.8 src/etc/pam.d/ftpd
cvs rdiff -u -r1.9 -r1.10 src/etc/pam.d/sshd
cvs rdiff -u -r1.8 -r1.9 src/etc/pam.d/su src/etc/pam.d/system
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
