auth required pam_listfile.so item=user sense=deny file=/etc/security/blacklist.gdm onerr=succeed
auth required pam_tally.so deny=0 file=/var/log/faillog onerr=succeed
auth required pam_permit.so
+
account required pam_shells.so
account required pam_nologin.so
account required pam_access.so
account include system-auth
+
password include system-auth
+
session optional pam_keyinit.so force revoke
session include system-auth
session optional pam_console.so