#%PAM-1.0
auth		sufficient	pam_rootok.so
auth		required	pam_listfile.so item=user sense=allow file=/etc/security/chfn.allow onerr=fail
auth		required	pam_unix.so
account		required	pam_unix.so
password	required	pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
password	required	pam_unix.so md5 shadow use_authtok
password	required	pam_make.so /var/db
session		required	pam_unix.so