#%PAM-1.0
auth required /lib/security/pam_listfile.so item=user sense=allow file=/etc/security/chsh onerr=fail
auth       sufficient   /lib/security/pam_rootok.so
auth       required	/lib/security/pam_pwdb.so md5 shadow 
account    required	/lib/security/pam_pwdb.so
password   required	/lib/security/pam_cracklib.so
password   required	/lib/security/pam_pwdb.so md5 shadow use_authtok
session    required	/lib/security/pam_pwdb.so