Modified: puppet/modules/pam/templates/system-auth
===================================================================
--- puppet/modules/pam/templates/system-auth 2010-11-22 12:41:54 UTC (rev 387)
+++ puppet/modules/pam/templates/system-auth 2010-11-22 13:15:21 UTC (rev 388)
@@ -3,7 +3,7 @@
# basically, the idea is to copy the exact detail of sufficient,
# and add abort=ignore
auth [abort=ignore success=done new_authtok_reqd=done default=ignore] pam_tcb.so shadow fork nullok prefix=$2a$ count=8
-auth sufficient pam_unix.so likeauth nullok
+auth sufficient pam_unix.so likeauth nullok try_first_pass
auth sufficient pam_ldap.so use_first_pass
<% if access_class = 'admin' %>
auth required pam_wheel.so group=mga-sysadmin