#%PAM-1.0
#    Copyright (c) 2011-2012,2017 Ericsson AB.
#    All rights reserved.
# PAM configuration for the Secure Shell service
#

# Authentication 
# - force reading environment variables
# - from /etc/environment file
# - use pam_rcm, then system-auth
auth       required     pam_env.so # [1]
auth       required     pam_env.so envfile=/etc/environment
auth       required     pam_env.so debug
auth       include      system-auth

# Authorization
account    required     pam_nologin.so
account    include      system-auth

# Password
password   include      system-auth

# Session
session    optional     pam_keyinit.so debug force revoke
session    optional     pam_umask.so umask=0002
session    optional     pam_lastlog.so nowtmp
session    include      system-auth
session    required     pam_loginuid.so debug
