ad-auth: improve sssd's pam config for offline use

594710aa · Lars Beckers · 3d6c4152 · 594710aa
Commit 594710aa authored May 14, 2017 by Lars Beckers
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 0 deletions

ad-auth/templates/sssd.conf.j2 ad-auth/templates/sssd.conf.j2 +5 -0

No files found.
--- a/ad-auth/templates/sssd.conf.j2
+++ b/ad-auth/templates/sssd.conf.j2
@@ -3,6 +3,11 @@ domains = {{ domain }}
 config_file_version = 2
 services = nss, pam

+[pam]
+offline_credentials_expiration = 1
+offline_failed_login_attempts = 3
+offline_failed_login_delay = 0
+
 [domain/{{ domain }}]
 ad_domain = {{ domain }}
 krb5_realm = {{ domain.upper() }}