session required        pam_unix.so
session [success=ok default=ignore]     pam_lsass.so
session optional        pam_systemd.so
session optional                        pam_ck_connector.so nox11