search

ghoneycutt / puppet-module-pam

Puppet module to manage PAM
Other
18 stars 79 forks source link

Unwanted 'deny all' in allowed_users #131

Closed butlerdr closed 7 years ago

butlerdr commented 8 years ago

Using this module on Satellite 6, the allowed_users variables automatically adds the following lines:

default deny

Formatting for the users and groups I want in there is perfect, but that final line appears anyway unwanted all the time.

Reproducible: always OS: Red Hat Enterprise Linux 6.7 Puppet master: Red Hat Satellite 6.1.8

benkevan commented 7 years ago

Can you describe how it's unwanted?

Are you saying you want to remove the the DENY declaration?

ghoneycutt commented 7 years ago

The default deny is by design as it is the right thing to do from a security perspective. If you would like to make this optional, I'm happy to accept a pull request.