# file copied from configuration package (rootfs/etc/pam.d/common-account) account requisite pam_unix.so account [success=ok new_authtok_reqd=ok ignore=ignore default=bad user_unknown=ignore] pam_krb5.so use_first_pass account sufficient pam_localuser.so account required pam_ldap.so use_first_pass