#%PAM-1.0
#
# The PAM configuration file for system authentication
#

auth		required			pam_faillock.so		preauth
-auth		[success=2 default=ignore]	pam_systemd_home.so
-auth		[success=1 default=bad]		pam_unix.so		try_first_pass nullok
auth		[default=die]			pam_faillock.so		authfail
auth		optional			pam_permit.so
auth		required			pam_env.so
auth 		required			pam_faillock.so		authsucc

-account	[success=1 default=ignore]	pam_systemd_home.so
account		required			pam_unix.so
account		optional			pam_permit.so
account		required			pam_time.so

-password	[success=1 default=ignore]	pam_systemd_home.so
password	required			pam_unix.so		try_first_pass nullok shadow sha512
password	optional			pam_permit.so

-session	optional			pam_systemd_home.so
session		required			pam_limits.so
session		required			pam_unix.so
session		optional			pam_permit.so