kiran-authentication-service/0010-fix-multi-channel-auth-If-the-authentication-fails-t.patch

31 lines
1.3 KiB
Diff
Raw Normal View History

From 3af3972404b72f71851995e0d4e89bdb4ce29862 Mon Sep 17 00:00:00 2001
From: liuxinhao <liuxinhao@kylinsec.com.cn>
Date: Sat, 3 Jun 2023 17:08:16 +0800
Subject: [PATCH] fix(multi-channel auth): If the authentication fails, the
faillock module counts the data
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
- 修改多路认证情况下如果认证失败交由failock模块计数
---
data/kiran-authentication-service | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/data/kiran-authentication-service b/data/kiran-authentication-service
index e0f2763..8bbbea7 100644
--- a/data/kiran-authentication-service
+++ b/data/kiran-authentication-service
@@ -6,7 +6,7 @@
# =========================认证配置项目================================ #
# 多路认证模式,成/功则认证通过,失败/切换到密码 跳过多因子认证模式
-auth [success=done ignore=2 default=die] pam_kiran_authentication.so doauth
+auth [success=done ignore=2 default=bad] pam_kiran_authentication.so doauth
# 多因子认证模式, 成功继续执行PAM流程栈,失败或默认值都为失败
#auth [success=2 default=bad] pam_kiran_authentication.so doauth
# ==================================================================== #
--
2.33.0