Skip to content

Commit 8fb8c1b

Browse files
[JIRA SONIC-5583] added maxtries=die control flag to catch maxtry error from pam_unix
Change-Id: Id2b3ee2b94d83015617583ce1d5e85db12b1f388
1 parent b88a175 commit 8fb8c1b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

files/image_config/hostcfgd/common-auth-sonic.j2

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
auth [success=1 default=ignore] pam_unix.so nullok try_first_pass
1414

1515
{% elif auth['login'] == 'local,tacacs+' %}
16-
auth [success=done new_authtok_reqd=done default=ignore{{ ' auth_err=die' if not auth['failthrough'] }}] pam_unix.so nullok try_first_pass
16+
auth [success=done new_authtok_reqd=done default=ignore{{ ' auth_err=die maxtries=die' if not auth['failthrough'] }}] pam_unix.so nullok try_first_pass
1717
{% for server in servers | sub(0, -1) %}
1818
auth [success=done new_authtok_reqd=done default=ignore{{ ' auth_err=die' if not auth['failthrough'] }}] pam_tacplus.so server={{ server.ip }}:{{ server.tcp_port }} secret={{ server.passkey }} login={{ server.auth_type }} timeout={{ server.timeout }} {% if server.vrf %} vrf={{ server.vrf }} {% endif %} try_first_pass
1919
{% endfor %}

0 commit comments

Comments
 (0)