metadata.json

@@ -1,6 +1,6 @@
 {
   "name": "ghoneycutt-pam",
-  "version": "2.32.0",
+  "version": "2.33.0",
   "author": "ghoneycutt",
   "summary": "Manage PAM",
   "description": "Manages PAM, including specifying users and groups in access.conf, limits.conf, and limits fragments",

spec/fixtures/pam_d_sshd.defaults.debian7

@@ -2,6 +2,7 @@ auth     required     pam_env.so # [1]
 auth     required     pam_env.so envfile=/etc/default/locale
 @include common-auth
 account  required     pam_nologin.so
+account  required     pam_access.so
 @include common-account
 @include common-session
 session  optional     pam_motd.so  motd=/run/motd.dynamic noupdate

spec/fixtures/pam_d_sshd.defaults.debian8

@@ -1,5 +1,6 @@
 @include common-auth
 account  required     pam_nologin.so
+account  required     pam_access.so
 @include common-account
 session  [success=ok ignore=ignore module_unknown=ignore default=bad]        pam_selinux.so close
 session  required     pam_loginuid.so

spec/fixtures/pam_d_sshd.defaults.ubuntu1204

@@ -2,6 +2,7 @@ auth       required     pam_env.so # [1]
 auth       required     pam_env.so envfile=/etc/default/locale
 @include common-auth
 account    required     pam_nologin.so
+account    required     pam_access.so
 @include common-account
 @include common-session
 session    optional     pam_motd.so # [1]

spec/fixtures/pam_d_sshd.defaults.ubuntu1404

@@ -1,5 +1,6 @@
 @include common-auth
 account  required     pam_nologin.so
+account  required     pam_access.so
 @include common-account
 session  [success=ok ignore=ignore module_unknown=ignore default=bad]        pam_selinux.so close
 session  required     pam_loginuid.so

spec/fixtures/pam_d_sshd.defaults.ubuntu1604

@@ -1,5 +1,6 @@
 @include common-auth
 account  required     pam_nologin.so
+account  required     pam_access.so
 @include common-account
 session  [success=ok ignore=ignore module_unknown=ignore default=bad]        pam_selinux.so close
 session  required     pam_loginuid.so

templates/sshd.debian7.erb

@@ -2,6 +2,9 @@ auth     required     pam_env.so # [1]
 auth     required     pam_env.so envfile=/etc/default/locale
 @include common-auth
 account  required     pam_nologin.so
+<% if @sshd_pam_access != 'absent' -%>
+account  <%= @sshd_pam_access %>     pam_access.so
+<% end -%>
 @include common-account
 @include common-session
 session  optional     pam_motd.so  motd=/run/motd.dynamic noupdate

templates/sshd.debian8.erb

@@ -1,5 +1,8 @@
 @include common-auth
 account  required     pam_nologin.so
+<% if @sshd_pam_access != 'absent' -%>
+account  <%= @sshd_pam_access %>     pam_access.so
+<% end -%>
 @include common-account
 session  [success=ok ignore=ignore module_unknown=ignore default=bad]        pam_selinux.so close
 session  required     pam_loginuid.so

templates/sshd.ubuntu12.erb

@@ -2,6 +2,9 @@ auth       required     pam_env.so # [1]
 auth       required     pam_env.so envfile=/etc/default/locale
 @include common-auth
 account    required     pam_nologin.so
+<% if @sshd_pam_access != 'absent' -%>
+account    <%= @sshd_pam_access %>     pam_access.so
+<% end -%>
 @include common-account
 @include common-session
 session    optional     pam_motd.so # [1]

templates/sshd.ubuntu14.erb

@@ -1,5 +1,8 @@
 @include common-auth
 account  required     pam_nologin.so
+<% if @sshd_pam_access != 'absent' -%>
+account  <%= @sshd_pam_access %>     pam_access.so
+<% end -%>
 @include common-account
 session  [success=ok ignore=ignore module_unknown=ignore default=bad]        pam_selinux.so close
 session  required     pam_loginuid.so

templates/sshd.ubuntu16.erb

@@ -1,5 +1,8 @@
 @include common-auth
 account  required     pam_nologin.so
+<% if @sshd_pam_access != 'absent' -%>
+account  <%= @sshd_pam_access %>     pam_access.so
+<% end -%>
 @include common-account
 session  [success=ok ignore=ignore module_unknown=ignore default=bad]        pam_selinux.so close
 session  required     pam_loginuid.so