| # PAM configuration for the Secure Shell service |
| |
| # Read environment variables from /etc/environment and |
| # /etc/security/pam_env.conf. |
| auth required pam_env.so |
| |
| # Skip Google Authenticator if logging in from the local network. |
| # auth [success=1 default=ignore] pam_access.so accessfile=/etc/security/access-sshd-local.conf |
| # Google Authenticator 2-step verification. |
| # auth requisite pam_google_authenticator.so |
| |
| # Standard Un*x authentication. |
| auth include common-auth |
| |
| # Disallow non-root logins when /etc/nologin exists. |
| account required pam_nologin.so |
| |
| # Uncomment and edit /etc/security/access.conf if you need to set complex |
| # access limits that are hard to express in sshd_config. |
| # account required pam_access.so |
| |
| # Standard Un*x authorization. |
| account include common-account |
| |
| # Standard Un*x session setup and teardown. |
| session include common-session |
| |
| # Print the message of the day upon successful login. |
| session optional pam_motd.so |
| |
| # Print the status of the user's mailbox upon successful login. |
| session optional pam_mail.so standard noenv |
| |
| # Set up user limits from /etc/security/limits.conf. |
| session required pam_limits.so |
| |
| # Set up SELinux capabilities (need modified pam) |
| # session required pam_selinux.so multiple |
| |
| # Standard Un*x password updating. |
| password include common-password |