sudo-ldap/sudo.pam

   1 #%PAM-1.0
   2 auth            sufficient      pam_unix.so nullok_secure
   3 auth            requisite       pam_nologin.so
   4 auth [default=1 success=ignore] pam_succeed_if.so uid >= 1000 quiet
   5 auth            sufficient      pam_ldap.so use_first_pass
   6 auth            required        pam_deny.so
   7