--- trunk/pam-config/system-auth	2015/11/06 10:04:47	2899
+++ trunk/pam-config/system-auth	2023/08/08 11:27:56	3201
@@ -3,20 +3,24 @@
 # The PAM configuration file for system authentication
 #
 
-auth		required	pam_env.so
-auth		required	pam_unix.so try_first_pass likeauth nullok
-auth		optional	pam_permit.so
+auth		required			pam_faillock.so		preauth
+-auth		[success=2 default=ignore]	pam_systemd_home.so
+-auth		[success=1 default=bad]		pam_unix.so		try_first_pass nullok
+auth		[default=die]			pam_faillock.so		authfail
+auth		optional			pam_permit.so
+auth		required			pam_env.so
+auth 		required			pam_faillock.so		authsucc
 
-account		required	pam_unix.so
-account		optional	pam_permit.so
+-account	[success=1 default=ignore]	pam_systemd_home.so
+account		required			pam_unix.so
+account		optional			pam_permit.so
+account		required			pam_time.so
 
-password	required	pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
-password	required	pam_unix.so try_first_pass use_authtok nullok md5 shadow
-password	optional	pam_permit.so
+-password	[success=1 default=ignore]	pam_systemd_home.so
+password	required			pam_unix.so		try_first_pass nullok shadow sha512
+password	optional			pam_permit.so
 
-session		required	pam_limits.so
-session		required	pam_env.so
-session		optional	pam_loginuid.so
--session	optional	pam_systemd.so
-session		required	pam_unix.so
-session		optional	pam_permit.so
+-session	optional			pam_systemd_home.so
+session		required			pam_limits.so
+session		required			pam_unix.so
+session		optional			pam_permit.so