fix default pam config

tasks/install.yml

@@ -28,6 +28,16 @@
         mode: 0640
       notify: __cupsd_restart
 
+    - name: Update pamd rule's control in /etc/pam.d/cups
+      pamd:
+        name: cups
+        type: "{{ item.type }}"
+        control: "{{ item.control }}"
+        module_path: "{{ item.module }}"
+        module_arguments: "{{ item.arguments | default(omit) }}"
+        new_module_path: "{{ item.new_module }}"
+      loop: "{{ __pam_config }}"
+
     - name: Open ports in iptables
       iptables_raw:
         name: "{{ item.name }}"

vars/main.yml

@@ -4,3 +4,13 @@ __cups_rpm_files:
   - /var/tmp/cups-devel-2.2.10-0.x86_64.rpm
   - /var/tmp/cups-libs-2.2.10-0.x86_64.rpm
   - /var/tmp/cups-lpd-2.2.10-0.x86_64.rpm
+
+__pam_config:
+  - type: "auth"
+    control: "required"
+    module: "pam_unknown.so"
+    new_module: "pam_unix.so"
+  - type: "account"
+    control: "required"
+    module: "pam_unknown.so"
+    new_module: "pam_unix.so"