Module Name: src
Committed By: martin
Date: Wed Jun 21 21:33:02 UTC 2023
Modified Files:
src/etc/pam.d [netbsd-10]: display_manager ftpd sshd su system
Log Message:
Pull up following revision(s) (requested by riastradh in ticket #205):
etc/pam.d/ftpd: revision 1.8
etc/pam.d/su: revision 1.9
etc/pam.d/system: revision 1.9
etc/pam.d/display_manager: revision 1.6
etc/pam.d/sshd: revision 1.10
pam: Disable pam_krb5, pam_ksu by default.
These are not useful unless you also set up /etc/krb5.conf and a
keytab for the host from the Kerberos KDC. But having them enabled
by default means that creating /etc/krb5.conf just to enable use of
Kerberos for _client-side_ single sign-on creates usability issues.
As proposed on tech-security:
https://mail-index.netbsd.org/tech-security/2023/06/16/msg001160.html
To generate a diff of this commit:
cvs rdiff -u -r1.5 -r1.5.58.1 src/etc/pam.d/display_manager
cvs rdiff -u -r1.7 -r1.7.76.1 src/etc/pam.d/ftpd
cvs rdiff -u -r1.9 -r1.9.76.1 src/etc/pam.d/sshd
cvs rdiff -u -r1.8 -r1.8.6.1 src/etc/pam.d/su
cvs rdiff -u -r1.8 -r1.8.76.1 src/etc/pam.d/system
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
