User guide

Appendix D - Linux-PAM
User Guide 351
# If Kerberos server is down, uses the local service
#
kerberosdownlocal auth requisite pam_securetty.so
kerberosdownlocal auth optionalpam_auth_srv.so
kerberosdownlocal auth\
[ success=done new_authtok_reqd=done authinfo_unavail=ignore default=die ] \
pam_krb5.so no_ccache
kerberosdownlocal auth requiredpam_unix2.so
kerberosdownlocal account \
[ success=done new_authtok_reqd=done authinfo_unavail=ignore default=die ] \
pam_krb5.so no_ccache
kerberosdownlocal account requiredpam_unix2.so
kerberosdownlocal session \
[ success=done new_authtok_reqd=done authinfo_unavail=ignore default=die ] \
pam_krb5.so no_ccache
kerberosdownlocal session requiredpam_unix2.so
#
# The PAM configuration file for the `ldap' service
#
ldapauth sufficientpam_ldap.so
ldapaccount required pam_ldap.so
ldapsession required pam_ldap.so
#
# The PAM configuration file for the `ldapdownlocal' service
# If LDAP server is down, uses the local service
#
ldapdownlocal auth\
[ success=done new_authtok_reqd=done authinfo_unavail=ignore default=die ] \
pam_ldap.so