Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION 08-05-2008 Installation Manual page 251

10.3.23 PAM Configuration
New Configuration Files (containing comments for more information)
common-auth
Default PAM configuration for auth section
common-account
Default PAM configuration for account section
common-password
Default PAM configuration for password changing
common-session
Default PAM configuration for session management
You should include these default configuration files from within your application-spe-
cific configuration file, because it is easier to modify and maintain one file instead of
the approximately forty files that used to exist on the system. If you install an application
later, it inherits the already applied changes and the administrator is not required to re-
member to adjust the configuration.
The changes are simple. If you have the following configuration file (which should be
the default for most applications):
#%PAM-1.0
auth required
account required
password required
password required
#password required
session required
you can change it to:
#%PAM-1.0
auth include
account include
password include
session include
pam_unix2.so
pam_unix2.so
pam_pwcheck.so
pam_unix2.so use_first_pass use_authtok
pam_make.so /var/yp
pam_unix2.so
common-auth
common-account
common-password
common-session
Updating SUSE Linux Enterprise 233