system-auth.pamd

   1 #%PAM-1.0
   2 auth            required        pam_env.so
   3 auth            required        pam_tally.so deny=0 file=/var/log/faillog onerr=succeed
   4 auth            required        pam_unix.so try_first_pass
   5
   6 account         required        pam_tally.so file=/var/log/faillog onerr=succeed
   7 account         required        pam_time.so
   8 account         required        pam_unix.so
   9
  10 # password      [success=1 ignore=reset abort=die default=bad]  pam_pwgen.so upper=1 digit=1
  11 password        required        pam_cracklib.so try_first_pass difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
  12 password        required        pam_unix.so try_first_pass blowfish shadow use_authtok
  13 password        required        pam_exec.so failok seteuid /usr/bin/make -C /var/db
  14
  15 session         optional        pam_keyinit.so revoke
  16 session         required        pam_limits.so change_uid
  17 session         [success=1 default=ignore]      pam_succeed_if.so service in crond quiet use_uid
  18 session         required        pam_unix.so