# OpenMediaVault webgui FPM PAM service (headless, self-contained).
# Isolated from the desktop common-auth/common-account stacks.

auth        required        pam_faillock.so preauth silent audit deny=3 unlock_time=0
auth        [success=1 default=ignore]  pam_unix.so nullok_secure try_first_pass
auth        requisite       pam_deny.so
auth        required        pam_permit.so

account     required        pam_faillock.so
account     required        pam_unix.so

session     required        pam_unix.so
