diff --git a/factory/etc/pam.d/system-auth b/factory/etc/pam.d/system-auth index 522c51324a..c2d6240930 100644 --- a/factory/etc/pam.d/system-auth +++ b/factory/etc/pam.d/system-auth @@ -13,7 +13,7 @@ account sufficient pam_unix.so account required pam_permit.so -password sufficient pam_systemd_home.so -password sufficient pam_unix.so sha512 shadow try_first_pass try_authtok +password sufficient pam_unix.so sha512 shadow try_first_pass use_authtok password required pam_deny.so -session optional pam_keyinit.so revoke diff --git a/man/pam_systemd.xml b/man/pam_systemd.xml index 21a2581b24..24174213e2 100644 --- a/man/pam_systemd.xml +++ b/man/pam_systemd.xml @@ -318,7 +318,8 @@ account sufficient pam_unix.so account required pam_permit.so -password sufficient pam_systemd_home.so -password sufficient pam_unix.so sha512 shadow try_first_pass try_authtok +password sufficient pam_unix.so sha512 shadow try_first_pass use_authtok + password required pam_deny.so -session optional pam_keyinit.so revoke diff --git a/man/pam_systemd_home.xml b/man/pam_systemd_home.xml index 93e8435805..906d1c1516 100644 --- a/man/pam_systemd_home.xml +++ b/man/pam_systemd_home.xml @@ -139,7 +139,7 @@ account sufficient pam_unix.so account required pam_permit.so -password sufficient pam_systemd_home.so -password sufficient pam_unix.so sha512 shadow try_first_pass try_authtok +password sufficient pam_unix.so sha512 shadow try_first_pass use_authtok password required pam_deny.so -session optional pam_keyinit.so revoke