1fd55b23fc00781fcca550ebf7cc9c0ca6283909
Since pve-access-control commit 01f191c ("fix #1670: change PAM service
name to project specific name"), the PAM realm authenticates with the
PAM service name 'proxmox-ve-auth'. This allows changing the PAM
configuration for logins to Proxmox VE only, for example to not allow
logins of users with an empty password, which the default 'nullok'
option of pam_unix in common-auth does. But this is only mentioned in
the commit message.
Document the service name, the fallback to the 'other' service if no
such configuration exists, and that this configuration is local to each
node, like the system users.
Signed-off-by: Michal Fox <me@dualfroz.com>
Languages
AsciiDoc
100%