tree 2e10b7b8f7646e2c39044bed3fe55b95bb0918a9
parent 1934adfce56091b78b33b04666543f6b5d973b59
author Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com> 1567165623 +0530
committer Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com> 1568302945 +0530

pam: Fix not querying password for invalid user

Not querying password for invalid user name is security
issue and can be used to determine valid / invalid user names
in the system. Always proceed to password acceptance screen
for invalid user login attempt too. This commit configures
pam_tally2 to ignore unknown user and proceed to do password
check.

Tested:
Verified the same in bmc serial console login with invalid user
name and password was requested, before displaying login incorrect.

Note: dropbear handles this already and hence ssh will not exhibit
this behavior.

Change-Id: Icb5a48dc0a026664d17c4056ed4b4c995f8a81ad
Signed-off-by: Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com>