On Wed, 2017-06-21 at 14:35 -0400, Bertrand Rault wrote: > Hello, > > Would any of you know what changed or was deprecated between RHEL6 > and RHEL7 with regards to PAM and its functionality? > If you have any info that could be shared about this, let me know. Just the most important things from top of my head: pam_tally, pam_tally2 is deprecated in favor of pam_faillock pam_cracklib, pam_pwquality is deprecated in favor of pam_pwquality pam_console is deprecated without replacement (its functionality is mostly handled by systemd in slightly different way) pam_unix remember option is deprecated in favor of pam_pwhistory -- Tomáš Mráz Red Hat No matter how far down the wrong road you've gone, turn back. Turkish proverb [You'll know whether the road is wrong if you carefully listen to your conscience.] * Google and NSA associates, this message is none of your business. * Please leave it alone, and consider whether your actions are * authorized by the contract with Red Hat, or by the US constitution. * If you feel you're being encouraged to disregard the limits built * into them, remember Edward Snowden and Wikileaks. _______________________________________________ Pam-list mailing list Pam-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/pam-list