summaryrefslogtreecommitdiff
path: root/meta-phosphor/recipes-extended/pam/libpam/pam.d/common-account
diff options
context:
space:
mode:
Diffstat (limited to 'meta-phosphor/recipes-extended/pam/libpam/pam.d/common-account')
-rw-r--r--meta-phosphor/recipes-extended/pam/libpam/pam.d/common-account3
1 files changed, 2 insertions, 1 deletions
diff --git a/meta-phosphor/recipes-extended/pam/libpam/pam.d/common-account b/meta-phosphor/recipes-extended/pam/libpam/pam.d/common-account
index 82449cad03..9a739ecde2 100644
--- a/meta-phosphor/recipes-extended/pam/libpam/pam.d/common-account
+++ b/meta-phosphor/recipes-extended/pam/libpam/pam.d/common-account
@@ -18,7 +18,8 @@ account [success=2 new_authtok_reqd=done default=ignore] pam_unix.so
-account [success=1 new_authtok_reqd=done default=ignore] pam_ldap.so ignore_unknown_user ignore_authinfo_unavail
# here's the fallback if no module succeeds
account requisite pam_deny.so
-account required pam_tally2.so
+# Announce if faillock is blocking access
+account required pam_faillock.so
# prime the stack with a positive return value if there isn't one already;
# this avoids us returning an error just because nothing sets a success code
# since the modules above will each just jump around