how is 'sufficient' being handled?

[Pavel grynev pavel]

Hello, I am trying to configure a pam stack from scratch and came across the fact:
 
if a module marked ‘sufficient’ succeed then the entire section processioning comes to a halt and the stack is satisfied (if no prior  ‘required modules had failed). My questions are:
 
Imagine I have:
 
Ex.1
 
auth required foo
auth required bar
auth sufficient baz
auth required qux
 
if baz returns success will qux be executed or not?  Why/Why not?
 
Ex.2
 
auth required foo
auth required bar
auth sufficient baz
auth sufficient qux
 
if baz returns failure will qux be executed or not?  Why/Why not?
 
 
 
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/pam-list/attachments/20201227/9c85e5b0/attachment.htm>