Apéndice W. Archivo de configuración /etc/pamd.d/common-auth

#
# /etc/pam.d/common-auth - authentication settings common to all services
#
# This module type provides two aspects of authenticating the user.
# Firstly, it establishes that the user is who they claim to be, by
# instructing the application to prompt the user for a password or other
# means of identification. Secondly, the module can grant group membership
# (independently of the /etc/groups file) or other privileges through
# its credential granting properties. 
#
# This file is included from other service-specific PAM config files,
# and should contain a list of the authentication modules that define
# the central authentication scheme for use on the system
# (e.g., /etc/shadow, LDAP, Kerberos, etc.).  The default is to use the
# traditional Unix authentication mechanisms.
#

auth	sufficient	pam_unix.so
auth	sufficient	pam_ldap.so try_first_pass
auth	required	pam_env.so
auth	required	pam_securetty.so
auth	required	pam_unix_auth.so

# Se escribe un aviso en el archivo designado por
# syslog para la autentificación, en este caso:
# /var/log/auth.log
#
auth	required	pam_warn.so

auth	required	pam_deny.so