#%PAM-1.0
auth		required	pam_listfile.so item=user sense=deny file=/etc/security/blacklist onerr=succeed
auth		required	pam_listfile.so item=user sense=deny file=/etc/security/blacklist.kdm onerr=succeed
auth		required	pam_tally.so deny=0 file=/var/log/faillog onerr=succeed
auth		required	pam_shells.so
auth		required	pam_nologin.so
auth		required	pam_permit.so
account		required	pam_tally.so file=/var/log/faillog onerr=succeed
account		required	pam_access.so
account		required	pam_time.so
account		required	pam_unix.so
password	required	pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
password	required	pam_unix.so md5 shadow use_authtok
password	required	pam_make.so /var/db
session		required	pam_unix.so
session		required	pam_env.so
session		required	pam_limits.so change_uid
session		optional	pam_console.so
