# $NetBSD: ftpd.in,v 1.1 2024/12/30 21:59:08 jmmv Exp $
#
# PAM configuration for the "ftpd" service
#

# auth
# This looks very much like "system", but lacks the "nullok" option on
# pam_unix.
auth            required        pam_nologin.so          no_warn
auth            sufficient      pam_skey.so             no_warn try_first_pass
#auth           sufficient      pam_krb5.so             no_warn try_first_pass
auth            optional        pam_afslog.so           no_warn try_first_pass
auth            required        pam_unix.so             no_warn try_first_pass

# account
# Even though this is identical to "system", we open code it here because
# we open code the auth stack.
#account        required        pam_krb5.so
account         required        pam_unix.so

# session
session         required        pam_permit.so