system-auth.pamd

   1 #%PAM-1.0
   2 auth            required        pam_listfile.so item=user sense=deny file=/etc/security/blacklist onerr=succeed
   3 auth            required        pam_env.so
   4 auth            required        pam_tally.so deny=0 file=/var/log/faillog onerr=succeed
   5 auth            required        pam_unix.so try_first_pass
   6
   7 account         required        pam_tally.so file=/var/log/faillog onerr=succeed
   8 account         required        pam_time.so
   9 account         required        pam_unix.so
  10
  11 # password      [success=1 ignore=reset abort=die default=bad]  pam_pwgen.so upper=1 digit=1
  12 password        required        pam_cracklib.so try_first_pass difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
  13 password        required        pam_unix.so try_first_pass blowfish shadow use_authtok
  14 password        required        pam_exec.so failok seteuid /usr/bin/make -C /var/db
  15 # password      required        pam_exec.so failok seteuid /usr/bin/make -C /var/yp
  16
  17 session         optional        pam_keyinit.so revoke
  18 session         required        pam_limits.so change_uid
  19 session         [success=1 default=ignore]      pam_succeed_if.so service in crond quiet use_uid
  20 session         required        pam_unix.so