aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--templates/system-auth.tpl2
-rw-r--r--tests/rendered/custom/system-auth2
-rw-r--r--tests/rendered/default/system-auth2
-rw-r--r--tests/rendered/minimal/system-auth2
4 files changed, 4 insertions, 4 deletions
diff --git a/templates/system-auth.tpl b/templates/system-auth.tpl
index 9739b6f..9b078f3 100644
--- a/templates/system-auth.tpl
+++ b/templates/system-auth.tpl
@@ -11,7 +11,7 @@ auth requisite pam_faillock.so preauth
{% if homed %}
auth [success=2 default=ignore] pam_systemd_home.so
{% endif %}
-auth [success=1 default=ignore] pam_unix.so {{ nullok|default('', true) }} {{ debug|default('', true) }} try_first_pass
+auth [success=1 new_authtok_reqd=1 ignore=ignore default=bad] pam_unix.so {{ nullok|default('', true) }} {{ debug|default('', true) }} try_first_pass
auth [default=die] pam_faillock.so authfail
{% if caps %}
diff --git a/tests/rendered/custom/system-auth b/tests/rendered/custom/system-auth
index a84a45a..aae3914 100644
--- a/tests/rendered/custom/system-auth
+++ b/tests/rendered/custom/system-auth
@@ -1,6 +1,6 @@
auth required pam_env.so
auth requisite pam_faillock.so preauth
-auth [success=1 default=ignore] pam_unix.so nullok try_first_pass
+auth [success=1 new_authtok_reqd=1 ignore=ignore default=bad] pam_unix.so nullok try_first_pass
auth [default=die] pam_faillock.so authfail
account required pam_unix.so
account required pam_faillock.so
diff --git a/tests/rendered/default/system-auth b/tests/rendered/default/system-auth
index d84e030..4c069c3 100644
--- a/tests/rendered/default/system-auth
+++ b/tests/rendered/default/system-auth
@@ -1,6 +1,6 @@
auth required pam_env.so
auth requisite pam_faillock.so preauth
-auth [success=1 default=ignore] pam_unix.so try_first_pass
+auth [success=1 new_authtok_reqd=1 ignore=ignore default=bad] pam_unix.so try_first_pass
auth [default=die] pam_faillock.so authfail
account required pam_unix.so
account required pam_faillock.so
diff --git a/tests/rendered/minimal/system-auth b/tests/rendered/minimal/system-auth
index d84e030..4c069c3 100644
--- a/tests/rendered/minimal/system-auth
+++ b/tests/rendered/minimal/system-auth
@@ -1,6 +1,6 @@
auth required pam_env.so
auth requisite pam_faillock.so preauth
-auth [success=1 default=ignore] pam_unix.so try_first_pass
+auth [success=1 new_authtok_reqd=1 ignore=ignore default=bad] pam_unix.so try_first_pass
auth [default=die] pam_faillock.so authfail
account required pam_unix.so
account required pam_faillock.so