1*4882a593Smuzhiyun# 2*4882a593Smuzhiyun# The PAM configuration file for the Shadow `chsh' service 3*4882a593Smuzhiyun# 4*4882a593Smuzhiyun 5*4882a593Smuzhiyun# This will not allow a user to change their shell unless 6*4882a593Smuzhiyun# their current one is listed in /etc/shells. This keeps 7*4882a593Smuzhiyun# accounts with special shells from changing them. 8*4882a593Smuzhiyunauth required pam_shells.so 9*4882a593Smuzhiyun 10*4882a593Smuzhiyun# This allows root to change user shell without being 11*4882a593Smuzhiyun# prompted for a password 12*4882a593Smuzhiyunauth sufficient pam_rootok.so 13*4882a593Smuzhiyun 14*4882a593Smuzhiyun# The standard Unix authentication modules, used with 15*4882a593Smuzhiyun# NIS (man nsswitch) as well as normal /etc/passwd and 16*4882a593Smuzhiyun# /etc/shadow entries. 17*4882a593Smuzhiyunauth include common-auth 18*4882a593Smuzhiyunaccount include common-account 19*4882a593Smuzhiyunsession include common-session 20