lutsianna kiorky # cat /etc/pam.d/system-auth
#%PAM-1.0
auth            required        pam_env.so
auth            sufficient      pam_unix.so try_first_pass likeauth nullok
auth            sufficient      pam_ldap.so use_first_pass
auth            required        pam_deny.so

account         requisite       pam_unix.so
account         sufficient      pam_localuser.so
account         required        pam_ldap.so

password        required        pam_cracklib.so try_first_pass retry=3
password        sufficient      pam_unix.so nullok use_authtok shadow md5
password        sufficient      pam_ldap.so use_authtok use_first_pass
password        required        pam_deny.so

session         required        pam_limits.so
session         required        pam_unix.so
session         required        pam_mkhomedir.so skel=/etc/skel/ umask=0066
session         optional        pam_ldap.so

lutsianna kiorky #