tree c2a76ef80e3e2a87e7b0088f47434af8e4385d54
parent bca48eae0c40afa729922263645ead4447493193
author Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com> 1567165623 +0530
committer Brad Bishop <bradleyb@fuzziesquirrel.com> 1568369716 -0400

pam: Fix not querying password for invalid user

Not querying password for invalid user name is security
issue and can be used to determine valid / invalid user names
in the system. Always proceed to password acceptance screen
for invalid user login attempt too. This commit configures
pam_tally2 to ignore unknown user and proceed to do password
check.

Tested:
Verified the same in bmc serial console login with invalid user
name and password was requested, before displaying login incorrect.

Note: dropbear handles this already and hence ssh will not exhibit
this behavior.

(From meta-phosphor rev: 356ec08b989c84d1d034c3ff283a6909658d9435)

Change-Id: I72483d26ad7b7c39068ac33b7387adf2b10a1a27
Signed-off-by: Richard Marian Thomaiyar <richard.marian.thomaiyar@linux.intel.com>
Signed-off-by: Brad Bishop <bradleyb@fuzziesquirrel.com>