# PAM configuration for sudo with TSID authentication
# Replaces password prompt with TSID mobile approval

# TSID authentication (instead of password)
auth       requisite    pam_tsid.so sudo

# Account management
account    required     pam_permit.so

# Session
session    required     pam_limits.so
session    required     pam_unix.so

# Password (disabled)
password   requisite    pam_deny.so
