From b604cd137f38100ab44ee0329de75c98cfde66a7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Thomas=20So=C3=ABte?= Date: Sat, 28 Nov 2020 22:34:10 +0100 Subject: [PATCH] Fix MFAPasswordWarnDays in bastion.conf.dist Fix duplicate MFAPasswordMaxDays Fixes #71 --- etc/bastion/bastion.conf.dist | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/etc/bastion/bastion.conf.dist b/etc/bastion/bastion.conf.dist index 6096675..3e98851 100644 --- a/etc/bastion/bastion.conf.dist +++ b/etc/bastion/bastion.conf.dist @@ -219,10 +219,10 @@ # DEFAULT: 90 "MFAPasswordMaxDays": 90, # -# MFAPasswordMaxDays (int >= 0) +# MFAPasswordWarnDays (int >= 0) # DESC: For the PAM UNIX password MFA, sets the number of days before expiration on which the user will be warned to change his password (see `chage -W') # DEFAULT: 15 -"MFAPasswordMaxDays": 15, +"MFAPasswordWarnDays": 15, # # MFAPasswordInactiveDays (int >= -1) # DESC: For the PAM UNIX password MFA, the account will be blocked after the password is expired (and not renewed) for this amount of days (see `chage -E'). -1 disables this feature. Note that this is different from the accountMaxInactiveDays option above, that is handled by the bastion software itself instead of PAM