# Test failure of forced authentication principal (no fallback).  -*- conf -*-
#
# Written by Russ Allbery <eagle@eyrie.org>
# Copyright 2014, 2020 Russ Allbery <eagle@eyrie.org>
# Copyright 2010-2011
#     The Board of Trustees of the Leland Stanford Junior University
#
# SPDX-License-Identifier: BSD-3-clause or GPL-1+

[options]
    auth    = alt_auth_map=%1 force_alt_auth force_first_pass no_ccache debug
    account = alt_auth_map=%1 no_ccache debug

[run]
    authenticate  = PAM_AUTH_ERR
    acct_mgmt     = PAM_IGNORE

[output]
    DEBUG pam_sm_authenticate: entry
    DEBUG (user %u) mapping bogus-nonexistent-account to %1
    DEBUG /^\(user %u\) alternate authentication failed: /
    NOTICE authentication failure; logname=%u uid=%i euid=%i tty= ruser= rhost=
    DEBUG pam_sm_authenticate: exit (failure)
    DEBUG pam_sm_acct_mgmt: entry
    DEBUG skipping non-Kerberos login
    DEBUG pam_sm_acct_mgmt: exit (ignore)