auth required pam_env.so auth requisite pam_faillock.so preauth auth [success=1 new_authtok_reqd=1 ignore=ignore default=bad] pam_unix.so try_first_pass auth [default=die] pam_faillock.so authfail account required pam_unix.so account required pam_faillock.so password required pam_unix.so try_first_pass md5 shadow session required pam_limits.so session required pam_env.so session required pam_unix.so