etc/pam.d/su

   1 # $NetBSD: su,v 1.6 2005/04/05 18:23:36 christos Exp $
   2 #
   3 # PAM configuration for the "su" service
   4 #
   5
   6 # auth
   7 auth            sufficient      pam_rootok.so           no_warn
   8 auth            sufficient      pam_self.so             no_warn
   9 auth            sufficient      pam_skey.so             no_warn try_first_pass
  10 auth            sufficient      pam_ksu.so              no_warn try_first_pass
  11 #auth           sufficient      pam_group.so            no_warn group=rootauth root_only authenticate
  12 auth            requisite       pam_group.so            no_warn group=wheel root_only fail_safe
  13 auth            required        pam_unix.so             no_warn try_first_pass nullok
  14
  15 # account
  16 account         required        pam_login_access.so
  17 account         include         system
  18
  19 # session
  20 session         required        pam_permit.so