#%PAM-1.0
-auth required /lib/security/pam_pwdb.so md5 shadow
-auth required /lib/security/pam_nologin.so
-account required /lib/security/pam_pwdb.so
-password required /lib/security/pam_cracklib.so
-password required /lib/security/pam_pwdb.so md5 shadow use_authtok
-session required /lib/security/pam_pwdb.so
-session optional /lib/security/pam_console.so
+auth required pam_listfile.so item=user sense=deny file=/etc/security/blacklist.xdm onerr=succeed
+auth include system-auth
+account required pam_shells.so
+account required pam_nologin.so
+account required pam_access.so
+account include system-auth
+password include system-auth
+session optional pam_keyinit.so force revoke
+session include system-auth
+session optional pam_console.so
+session optional pam_ck_connector.so