# Defer prompting to the Kerberos library w/try_first_pass.  -*- conf -*-
#
# Written by Russ Allbery <eagle@eyrie.org>
# Copyright 2014, 2020 Russ Allbery <eagle@eyrie.org>
# Copyright 2010-2011
#     The Board of Trustees of the Leland Stanford Junior University
#
# SPDX-License-Identifier: BSD-3-clause or GPL-1+

[options]
    auth    = no_ccache no_prompt try_first_pass
    account = no_ccache
    session = no_ccache

[run]
    authenticate  = PAM_SUCCESS
    acct_mgmt     = PAM_SUCCESS
    open_session  = PAM_SUCCESS
    close_session = PAM_SUCCESS

[prompts]
    echo_off = /^(%u's Password|Password for %u): $/|%p

[output]
    INFO user %u authenticated as %u