fix debian faillock config

Signed-off-by: Martin Schurz <[email protected]>
2021-02-14 23:13:14 +01:00
1 parent b9e33091e2
commit 26c73ed1c9
@@ -1,10 +1,12 @@
 {{ ansible_managed | comment }}
 # Generated by Ansible role {{ ansible_role_name }}

-Name: faillock lockout after failed attempts enforcement
-Default: yes
+Name: faillock boilerplate
+Default: no
 Priority: 1024
-Auth-Type: Additional
+Auth-Type: Primary
 Auth:
-  [default=die]      pam_faillock.so authfail
-  required           pam_faillock.so authsucc
+  required           pam_faillock.so preauth
+Account-Type: Primary
+Account:
+  required           pam_faillock.so
@@ -0,0 +1,10 @@
+{{ ansible_managed | comment }}
+# Generated by Ansible role {{ ansible_role_name }}
+
+Name: faillock lockout after failed attempts enforcement
+Default: no
+Priority: 0
+Auth-Type: Primary
+Auth:
+  required           pam_faillock.so authfail
+