#%PAM-1.0
auth     required       pam_securetty.so
auth     required       pam_nologin.so
auth     sufficient     pam_ldap.so
auth     required       pam_unix.so      nullok try_first_pass #set_secrpc
account  sufficient     pam_ldap.so
account  required       pam_unix.so
password required       pam_pwcheck.so    nullok
password required       pam_ldap.so       use_first_pass use_authok
password required       pam_unix.so       nullok use_first_pass use_authtok
session  required       pam_unix.so       none # debug or trace
session  required       pam_limits.so
session  required      pam_env.so
session  optional      pam_mail.so