duosecurity/duo_unix — pull request #34 by ryancdotorg (2013-07-24 21:17:09+00:00)
Title: add a groups_mode switch between require/exempt

Updated pam_duo to make it easy to specify groups as exempt. While this is already possible, it needs to be done by

groups = *,!exempt_group

which is rather obtuse. This patch allows you to instead specify

groups = exempt_group
groups_mode = exempt

which is more clear. The man page has been updated as well as the module itself.