#! /usr/bin/patch -p0
#  /global/src/etc/manage-scripts/patches/RCS/P-sshd_config-allow-hostbased,v 1.2 2007/05/27 12:39:28 pb2
2 Exp $
# patch to allow ssh login on XenE 5.5 systems with AD enabled.
# Some systems have the list of permitted users as expected,
# but others have none. If no AD.CL.CAM.AC.UK\$users,
# disable lsass
#
# #atch-file matches = cl.cam|CL.CAM
# patch-file hasno = ^account.*required.*pam_lsass.so
# patch-file distmatches =  Citrix.XenServer.Host.5.5
# Process using /usr/bin/cl-patch-file unless matching the above
--- /etc/pam.d/sshd	2009-06-17 11:53:05.000000000 +0100
+++ /etc/pam.d/sshd	2009-06-17 13:25:50.000000000 +0100
@@ -14,3 +14,3 @@
 account    required       pam_nologin.so
-account     required      pam_lsass.so unknown_ok
+#CL.CAM.AC  required      pam_lsass.so unknown_ok
 # Start of list of allowed AD groups and users
