# $NetBSD: display_manager.in,v 1.1 2024/12/30 21:59:08 jmmv Exp $
#
# PAM configuration for the display manager services.  Specific display
# manager service configurations can include this one.
#

# auth
auth            required        pam_nologin.so          no_warn
auth            sufficient      pam_skey.so             no_warn try_first_pass
#auth           sufficient      pam_krb5.so             no_warn try_first_pass
auth            optional        pam_afslog.so           no_warn try_first_pass
# pam_ssh has potential security risks.  See pam_ssh(8).
#auth           sufficient      pam_ssh.so              no_warn try_first_pass
auth            required        pam_unix.so             no_warn try_first_pass

# account
#account        required        pam_krb5.so
account         required        pam_unix.so

# session
# XXX pam_lastlog.so?
# pam_ssh has potential security risks.  See pam_ssh(8).
#session        optional        pam_ssh.so              want_agent
session         required        pam_permit.so