# ---------------------------------------------------------------------------#
# /etc/pam.conf by Henryk Liniowski (http://linio.terramail.pl)                    #
# ---------------------------------------------------------------------------#
chfn    auth       required   pam_unix.so
chfn    account    required   pam_unix.so
chfn    password   required   pam_unix.so shadow md5 use_authtok
#
chsh    auth       required   pam_unix.so
chsh    account    required   pam_unix.so
chsh    password   required   pam_unix.so shadow md5 use_authtok
#
login   auth       requisite  pam_securetty.so
login   auth       required   pam_unix.so
login   auth       required   pam_nologin.so
login   account    requisite  pam_time.so
login   account    required   pam_unix.so
login   password   required   pam_unix.so shadow md5 use_authtok
login   session    required   pam_unix.so
login   session    required   pam_limits.so
#
passwd  password   required   pam_unix.so shadow md5
#
# su    auth       required     pam_wheel.so
su      auth       sufficient   pam_rootok.so
su      auth       required     pam_unix.so
su      account    required     pam_unix.so
su      session    required     pam_unix.so
su      password   required     pam_unix.so shadow md5 use_authtok
#
sshd    auth       required     pam_unix.so shadow nodelay use_first_pass
sshd    auth       required     pam_nologin.so
sshd    auth       required     pam_shells.so
sshd    account    required     pam_unix.so
sshd    account    requisite    pam_time.so
sshd    password   required     pam_unix.so shadow use_authtok
sshd    session    required     pam_unix.so
sshd    session    required     pam_limits.so
#
shadow   auth      sufficient pam_rootok.so
shadow   account   required   pam_permit.so
shadow   password  required   pam_permit.so
shadow   session   required   pam_deny.so
#
useradd   auth     required   pam_rootok.so
useradd   account  required   pam_permit.so
useradd   password required   pam_permit.so
useradd   session  required   pam_deny.so
#
userdel   auth     required   pam_rootok.so
userdel   account  required   pam_permit.so
userdel   password required   pam_permit.so
userdel   session  required   pam_deny.so
#
usermod  auth      required   pam_rootok.so
usermod  account   required   pam_permit.so
usermod  password  required   pam_permit.so
usermod  session   required   pam_deny.so
#
groupadd  auth     required   pam_rootok.so
groupadd  account  required   pam_permit.so
groupadd  password required   pam_permit.so
groupadd  session  required   pam_deny.so
#
groupdel  auth     required   pam_rootok.so
groupdel  account  required   pam_permit.so
groupdel  password required   pam_permit.so
groupdel  session  required   pam_deny.so
#
groupmod  auth     required   pam_rootok.so
groupmod  account  required   pam_permit.so
groupmod  password required   pam_permit.so
groupmod  session  required   pam_deny.so
#
newusers  auth     required   pam_rootok.so
newusers  account  required   pam_permit.so
newusers  password required   pam_permit.so
newusers  session  required   pam_deny.so
#
chpasswd  auth     required   pam_rootok.so
chpasswd  account  required   pam_permit.so
chpasswd  password required   pam_permit.so
chpasswd  session  required   pam_deny.so
#
chage   auth       sufficient pam_rootok.so
chage   auth       required   pam_unix.so
chage   account    required   pam_unix.so
chage   password   required   pam_permit.so
chage   session    required   pam_deny.so
#
other   auth       required   pam_deny.so
other   auth       required   pam_warn.so
other   account    required   pam_deny.so
other   password   required   pam_deny.so
other   password   required   pam_warn.so
other   session    required   pam_deny.so