summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMikle Kolyada <zlogene@gentoo.org>2020-09-13 12:59:15 +0300
committerMikle Kolyada <zlogene@gentoo.org>2020-09-13 13:00:50 +0300
commit46e6f29b1f9b7edd9541382fddd9b0837900e649 (patch)
tree918defca38bbbfa68c4d61b47da878a7c153e7e4 /templates
parentsystem-auth: switch password modules to configs (diff)
downloadpambase-46e6f29b1f9b7edd9541382fddd9b0837900e649.tar.gz
pambase-46e6f29b1f9b7edd9541382fddd9b0837900e649.tar.bz2
pambase-46e6f29b1f9b7edd9541382fddd9b0837900e649.zip
system-auth: introduce pam_pwhistorypambase-20200917
Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
Diffstat (limited to 'templates')
-rw-r--r--templates/system-auth.tpl4
1 files changed, 4 insertions, 0 deletions
diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl
index 0381e66..46fc131 100644
--- a/templates/system-auth.tpl
+++ b/templates/system-auth.tpl
@@ -32,6 +32,10 @@ password required pam_passwdqc.so config=/etc/security/passwdqc.conf
password required pam_pwquality.so
{% endif %}
+{% if pwhistory %}
+password required pam_pwhistory.so use_authtok remember=5 retry=3
+{% endif %}
+
{% if krb5 %}
password [success=1 default=ignore] pam_krb5.so {{ krb5_params }}
{% endif %}