From 3f36e2c3de28b3cde25a27d05e49d354e098c368 Mon Sep 17 00:00:00 2001 From: Sam James Date: Tue, 3 Nov 2020 07:19:16 +0000 Subject: templates/system-auth.tpl: shift cap to be with other auth Signed-off-by: Sam James --- templates/system-auth.tpl | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl index 4ff78e4..19e08fa 100644 --- a/templates/system-auth.tpl +++ b/templates/system-auth.tpl @@ -12,6 +12,10 @@ auth [success=1 default=ignore] pam_unix.so {{ nullok|default('', true) }} {{ d auth [default=die] pam_faillock.so authfail auth optional pam_permit.so +{% if caps %} +-auth optional pam_cap.so +{% endif %} + {% if krb5 %} account [success=2 default=ignore] pam_krb5.so {{ krb5_params }} {% endif %} @@ -47,8 +51,4 @@ password optional pam_permit.so session optional pam_ssh.so {% endif %} -{% if caps %} --auth optional pam_cap.so -{% endif %} - {% include "templates/system-session.tpl" %} -- cgit v1.2.3-65-gdbad