system-auth.tpl: fix sssd's pam_deny

Closes: https://bugs.gentoo.org/922918 Signed-off-by: Sam James <sam@gentoo.org>
gentoo · Jan 28, 2024 · f6e52e5 · f6e52e5
1 parent c2060f4
commit f6e52e5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl
@@ -31,7 +31,7 @@ auth		sufficient	pam_sss.so forward_pass {{ debug|default('', true) }}
 auth		optional	pam_cap.so
 {% endif %}
 {% if sssd %}
-auth		sufficient	pam_deny.so
+auth		required	pam_deny.so
 {% endif %}
 {% if krb5 %}
 account		[success=2 default=ignore]	pam_krb5.so {{ krb5_params }}