--- trunk/pam/system-auth	2011/08/03 17:27:54	1479
+++ trunk/pam/system-auth	2012/03/31 13:12:42	1718
@@ -4,15 +4,18 @@
 #
 
 auth		required	pam_env.so
-auth		sufficient	pam_unix.so try_first_pass nullok
-auth		required	pam_deny.so
+auth		required	pam_unix.so try_first_pass likeauth nullok
+auth		optional	pam_permit.so
 
 account		required	pam_unix.so
+account		optional	pam_permit.so
 
 password	required	pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
-password	sufficient	pam_unix.so try_first_pass use_authtok nullok md5 shadow
-password	required	pam_deny.so
+password	required	pam_unix.so try_first_pass use_authtok nullok md5 shadow
+password	optional	pam_permit.so
 
 session		required	pam_limits.so
+session		required	pam_env.so
 session		required	pam_unix.so
 session		optional	pam_console.so
+session		optional	pam_permit.so