From 84faa5528bfa7964319b329073e66ff4ab918d8b Mon Sep 17 00:00:00 2001
From: Pascal Rigaux <pixel@mandriva.com>
Date: Wed, 10 Nov 2004 15:02:05 +0000
Subject: - correctly restore pam.d/system-auth when setting "local"
 authentication - no use_first_pass on "auth sufficient pam_unix.so" line for
 pam_castella

---
 perl-install/authentication.pm | 20 ++++++++++++++------
 1 file changed, 14 insertions(+), 6 deletions(-)

(limited to 'perl-install/authentication.pm')

diff --git a/perl-install/authentication.pm b/perl-install/authentication.pm
index a66ddf51e..2d0415a38 100644
--- a/perl-install/authentication.pm
+++ b/perl-install/authentication.pm
@@ -147,7 +147,9 @@ sub set {
 
     sshd_config_UsePAM($kind ne 'local');
 
-    if ($kind eq 'SmartCard') {
+    if ($kind eq 'local') {
+	set_pam_authentication();
+    } elsif ($kind eq 'SmartCard') {
 	$in->do_pkgs->install('castella-pam');
 	set_pam_authentication('castella');
     } elsif ($kind eq 'LDAP') {
@@ -349,14 +351,20 @@ sub set_pam_authentication {
 		#- first removing previous config
 		$_ = '';
 	    }
-	    if ($module eq 'pam_unix' && $special{$type} && @{$special{$type}}) {
+	    if ($module eq 'pam_unix' && $special{$type}) {
 		my @para_for_last = 
-		  $type eq 'auth' ? qw(likeauth nullok use_first_pass) :
-		  $type eq 'account' ? qw(use_first_pass) : @{[]};
+		    $type eq 'auth' ? qw(likeauth nullok use_first_pass) :
+		    $type eq 'account' ? qw(use_first_pass) : @{[]};
 		@para = difference2(\@para, \@para_for_last);
 
-		my ($before, $after) = partition { member($_, 'krb5', 'castella') } @{$special{$type}};
-		my @l = ((map { [ "pam_$_" ] } @$before),
+		my ($before_noask, $ask) = partition { $_ eq 'castella' } @{$special{$type}};
+		my ($before, $after) = partition { $_ eq 'krb5' } @$ask;
+
+		if (!@$ask) {
+		    @para_for_last = grep { $_ ne 'use_first_pass' } @para_for_last;
+		}
+
+		my @l = ((map { [ "pam_$_" ] } @$before_noask, @$before),
 			 [ 'pam_unix', @para ],
 			 (map { [ "pam_$_" ] } @$after),
 			 );
-- 
cgit v1.2.1