From 2b0a78042b4e2417070dce503d05283862f6daac Mon Sep 17 00:00:00 2001
From: Chris Hines <hines.cw@gmail.com>
Date: Wed, 11 Dec 2019 17:06:48 +1100
Subject: [PATCH] change to pam_access

Former-commit-id: 24970d91ba21af3c675ca77575c786478e1d9e83
---
 roles/pam_sshd/templates/loginnodes_sshd.j2 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/pam_sshd/templates/loginnodes_sshd.j2 b/roles/pam_sshd/templates/loginnodes_sshd.j2
index 0b73a8cf..b22b0bbf 100644
--- a/roles/pam_sshd/templates/loginnodes_sshd.j2
+++ b/roles/pam_sshd/templates/loginnodes_sshd.j2
@@ -4,7 +4,7 @@ auth       substack     password-auth
 auth       include      postlogin
 # Used with polkit to reauthorize users in remote sessions
 -auth      optional     pam_reauthorize.so prepare
-account [success=1 default=ignore] pam_succeed_if.so quiet user ingroup systems
+account    sufficient   pam_access.so
 account    required     pam_nologin.so
 account    include      password-auth
 password   include      password-auth
-- 
GitLab