auth        sufficient    /lib/security/pam_ldap.so
use_first_pass
password    sufficient    /lib/security/pam_ldap.so
use_authtok
session     optional      /lib/security/pam_ldap.so