#%PAM-1.0
-auth required /lib/security/pam_listfile.so item=user sense=allow file=/etc/security/chsh onerr=fail
-auth sufficient /lib/security/pam_rootok.so
-auth required /lib/security/pam_unix.so
-account required /lib/security/pam_unix.so
-password required /lib/security/pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
-password required /lib/security/pam_unix.so md5 shadow use_authtok
-session required /lib/security/pam_unix.so
-
-
+auth sufficient pam_rootok.so
+auth required pam_listfile.so item=user sense=allow file=/etc/security/chsh.allow onerr=fail
+auth include system-auth
+account include system-auth
+password include system-auth