summaryrefslogtreecommitdiffstats
path: root/redhat/zebra.pam
diff options
context:
space:
mode:
Diffstat (limited to 'redhat/zebra.pam')
-rw-r--r--redhat/zebra.pam18
1 files changed, 1 insertions, 17 deletions
diff --git a/redhat/zebra.pam b/redhat/zebra.pam
index 1390edf4..fb17f59e 100644
--- a/redhat/zebra.pam
+++ b/redhat/zebra.pam
@@ -1,26 +1,10 @@
#%PAM-1.0
#
-
-##### if running zebra as root:
# Only allow root (and possibly wheel) to use this because enable access
# is unrestricted.
-# auth sufficient /lib/security/pam_rootok.so
+auth sufficient /lib/security/pam_rootok.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth sufficient /lib/security/pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
#auth required /lib/security/pam_wheel.so use_uid
-###########################################################
-
-# If using zebra privileges and with a seperate group for vty access, then
-# access can be controlled via the vty access group, and pam can simply
-# check for valid user/password
-#
-# only allow local users.
-auth required /lib/security/pam_securetty.so
-auth required /lib/security/pam_stack.so service=system-auth
-auth required /lib/security/pam_nologin.so
-account required /lib/security/pam_stack.so service=system-auth
-password required /lib/security/pam_stack.so service=system-auth
-session required /lib/security/pam_stack.so service=system-auth
-session optional /lib/security/pam_console.so