Revision
448
Author
misc
Date
2010-11-24 02:27:30 +0100 (Wed, 24 Nov 2010)

Log Message

pam_wheel is made to be used with su only. pam_succeed_if seems to be the proper module

Modified Paths

Modified: puppet/modules/pam/templates/system-auth
===================================================================
--- puppet/modules/pam/templates/system-auth	2010-11-24 01:21:09 UTC (rev 447)
+++ puppet/modules/pam/templates/system-auth	2010-11-24 01:27:30 UTC (rev 448)
@@ -6,10 +6,10 @@
 auth    sufficient   pam_unix.so likeauth nullok try_first_pass
 auth    sufficient   pam_ldap.so use_first_pass
 <%- if access_class = 'admin' -%>
-auth    required     pam_wheel.so group=mga-sysadmin
+auth    required     pam_succeed_if.so quiet user ingroup mga-sysadmin
 <%- end -%>
 <%- if access_class = 'commiters' -%>
-auth    required     pam_wheel.so group=mga-commiters
+auth    required     pam_succeed_if.so quiet user ingroup mga-commiters
 <%- end -%>
 auth    required     pam_deny.so