Name: Yandex CAuth authentication
Default: yes
Priority: 512
Conflicts: sss

Auth-Type: Primary
Auth:
	sufficient    pam_skotty_sudo.so ignore_unknown_user ignore_authinfo_unavail ca_file=/var/cache/yandex-cauth-userd/current/sudoers_ca_list use_authtok
Account-Type: Primary
Account:
        sufficient      pam_localuser.so
        required        pam_access.so           accessfile=/etc/security/yandex-deny.conf
        sufficient      pam_access.so           accessfile=/etc/security/yandex-access.conf
        required        pam_access.so           accessfile=/etc/security/yandex-access-custom.conf
Session-Type: Additional
Session:
        required        pam_mkhomedir.so        skel=/etc/skel  umask=0022
        required        pam_limits.so
Password-Type: Primary
