[packages/pam] - add triggers for removed modules

[Jan Rękorajski]

On Fri, 05 Jan 2024, Jan Palus wrote:

> On 23.12.2023 10:53, baggins wrote:
> > commit 201cb6739a14557a0ec8bf7c3dd171b4fc06afeb
> > Author: Jan Rękorajski <baggins at pld-linux.org>
> > Date:   Sat Dec 23 09:24:52 2023 +0100
> > 
> >     - add triggers for removed modules
> > 
> >  pam.spec | 10 +++++++++-
> >  1 file changed, 9 insertions(+), 1 deletion(-)
> > ---
> > diff --git a/pam.spec b/pam.spec
> > index 8daeb42..a333ab9 100644
> > --- a/pam.spec
> > +++ b/pam.spec
> > @@ -413,7 +413,15 @@ if [ "$1" != 1 ]; then
> >  fi
> >  exit 0
> >  
> > -%triggerpostun -- %{name} < 1:1.1.5-8
> > +%triggerpostun -- %{name} < 1:1.5.3
> > +# removed in 1.5.3
> > +if grep -qs pam_tally /etc/pam.d/system-auth; then
> > +	%{__sed} -i -e '/pam_tally/d' /etc/pam.d/system-auth
> > +fi
> > +if grep -qs pam_cracklib /etc/pam.d/system-auth; then
> > +	%{__sed} -i -e '/pam_cracklib/ s/pam_cracklib/pam_pwquality/; s/$/ use_authtok/' /etc/pam.d/system-auth
>                                                                       ^^^^^^^^^^^^^^^^^
> 
> What's the reason for "use_authtok" exactly? There is no module left to
> prompt for password now and passwd just fails:
> 
> # passwd
> passwd: Authentication token manipulation error
> passwd: password unchanged

I'd swear I've been following the module docs, but it does not indeed
make sense. I'll fix it asap.

-- 
Jan Rękorajski                    | PLD/Linux
SysAdm | baggins<at>pld-linux.org | http://www.pld-linux.org/