Re: confused about "sufficient" vs. "required"

[Christian Seberino <seberino@xxxxxxxxxxxxxxx>]

Here is what you asked for.....



http://www.tldp.org/HOWTO/User-Authentication-HOWTO/x115.html#AEN153

Under "control" section discussing "sufficient".....


        "If authentication by this module is successful, PAM will grant
        authentication, even if a previous required module failed."
        

Chris 
        


On Tue, 2006-01-31 at 09:50 +0100, Tomas Mraz wrote:
> On Mon, 2006-01-30 at 15:18 -0800, Christian Seberino wrote:
> > I'm confused about "sufficient" because docs
> > suggest it can override a failed "required" test!
> Nope, sufficient can't override failed required module if the sufficient
> module is called after the required module. Could you please specify
> where the documentation states otherwise so it can be fixed?

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________

Pam-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/pam-list