Use pam_succeed_if to make it implicitly ask for the user name and verify that the provided one is correct. This can safely run as user.
3 lines
116 B
Plaintext
3 lines
116 B
Plaintext
# Custom stack to deny permit, independent of the user name/pass
|
|
auth requisite pam_succeed_if.so user = testuser
|