#%PAM-1.0

auth		[success=4 perm_denied=ignore default=die]	pam_localuser.so
auth		[success=1 default=bad]	pam_succeed_if.so uid >= 500 quiet
auth		[default=1]	pam_permit.so
auth		substack	system-auth-use_first_pass-krb5-only
auth		[default=1]	pam_permit.so
auth		substack	system-auth-use_first_pass-local-only
auth		substack	system-auth-common

password	[success=4 perm_denied=ignore default=die]	pam_localuser.so
password	[success=1 default=bad]	pam_succeed_if.so uid >= 500 quiet
password	[default=1]	pam_permit.so
password	substack	system-auth-use_first_pass-krb5-only
password	[default=1]	pam_permit.so
password	substack	system-auth-use_first_pass-local-only
password	substack	system-auth-common
