# $NetBSD: display_manager,v 1.5.50.1 2023/06/21 21:47:51 martin Exp $
#
# PAM configuration for the display manager services.  Specific display
# manager service configurations can include this one.
#

# auth
auth		required	pam_nologin.so		no_warn
auth		sufficient	pam_skey.so		no_warn try_first_pass
#auth		sufficient	pam_krb5.so		no_warn try_first_pass
auth		optional	pam_afslog.so		no_warn try_first_pass
# pam_ssh has potential security risks.  See pam_ssh(8).
#auth		sufficient	pam_ssh.so		no_warn try_first_pass
auth		required	pam_unix.so		no_warn try_first_pass

# account
#account 	required	pam_krb5.so
account		required	pam_unix.so

# session
# XXX pam_lastlog.so?
# pam_ssh has potential security risks.  See pam_ssh(8).
#session 	optional	pam_ssh.so		want_agent
session		required	pam_permit.so