2 auth requisite pam_nologin.so
3 auth required pam_env.so
4 auth requisite pam_permit.so
5 auth sufficient pam_succeed_if.so uid >= 1000 quiet
6 auth required pam_deny.so
7 account required pam_unix.so
8 password required pam_deny.so
9 session required pam_loginuid.so
10 -session optional pam_systemd.so
11 session optional pam_keyinit.so revoke
12 session required pam_limits.so
13 session required pam_unix.so