Hi Matt
On Wed, 13 May 2020 at 15:01, Andy Pieters <arch-general@xxxxxxxxxxxxxxxxx>
wrote:
>
>
> On Wed, 13 May 2020 at 14:53, Matt Pallissard <matt@xxxxxxxxxxxxxx> wrote:
>
>>
>> On 2020-05-13T12:39:50 +0100, Andy Pieters wrote:
>>
>> Should be doable, skip to pam_exec.so with `success=${num lines to skip}`
>>
>
Something appears to be wrong with that. As soon as I add [success=n]
logins start failing with
PAM unable to dlopen(/usr/lib/security/required):
/usr/lib/security/required:
cannot open shared object file: No such file or directory
and
PAM adding faulty module: /usr/lib/security/required
Looking through the man pages of pam_yubico and comparing it with those of
pam_deny and pam_succeed_if
it seems that pam_yubico does not support the passing of [success=,
default=] conditions...
