Allow non-root processes to use the PAM service - #1649

Merged

adombeck merged 8 commits into

mainfrom

856-allow-non-root

Jul 7, 2026

Commits on Jul 6, 2026

Allow non-root processes to use the PAM service

adombeck
and
Copilot
committed
006d3f9
brokers: track username per session in manager

adombeck
and
Copilot
committed
5ba8613
services/pam: delay response after repeated authentication failures

adombeck
and
Copilot
committed
98c2f87
Make auth-fail brute-force parameters configurable via authd.yaml

adombeck
and
Copilot
committed
35dbe9b
Fail-secure when auth-fail tracker is at capacity

adombeck
and
Copilot
committed
6021a23
Persist PAM broker choice during authentication

adombeck
and
Copilot
committed
8183406
pam: count auth.Retry responses toward the failure-delay threshold

adombeck
and
Copilot
committed
d74313f
pam: treat auth_fail_reset_window=0 as disabled

adombeck
and
Copilot
committed
bbc9164