For the sake of clarity, sufficient + sufficient leads to the problem. While sufficient + required doesn't (which is the actual configuration in shipped files). But it's an easy mistake that lots of people do, hence why pam_deny might save the day and help the users.
-- pam configuration could use safer defaults https://bugs.launchpad.net/bugs/152912 You received this bug notification because you are a member of Ubuntu Bugs, which is the bug contact for Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
