3 # Block login if they are globally disabled
4 auth required pam_nologin.so
6 # Load environment from /etc/environment and ~/.pam_environment
7 auth required pam_env.so
9 # Use /etc/passwd and /etc/shadow for passwords
10 auth required pam_unix.so
12 # Check account is active, change password if required
13 account required pam_unix.so
15 # Allow password to be changed
16 password required pam_unix.so
19 session required pam_unix.so
20 session optional pam_systemd.so