summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--templates/system-auth.tpl8
1 files changed, 4 insertions, 4 deletions
diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl
index 4ff78e4..19e08fa 100644
--- a/templates/system-auth.tpl
+++ b/templates/system-auth.tpl
@@ -12,6 +12,10 @@ auth [success=1 default=ignore] pam_unix.so {{ nullok|default('', true) }} {{ d
auth [default=die] pam_faillock.so authfail
auth optional pam_permit.so
+{% if caps %}
+-auth optional pam_cap.so
+{% endif %}
+
{% if krb5 %}
account [success=2 default=ignore] pam_krb5.so {{ krb5_params }}
{% endif %}
@@ -47,8 +51,4 @@ password optional pam_permit.so
session optional pam_ssh.so
{% endif %}
-{% if caps %}
--auth optional pam_cap.so
-{% endif %}
-
{% include "templates/system-session.tpl" %}