#
# /etc/pam.d/system-auth
#

auth       required                    pam_faillock.so      preauth
auth       [success=1 default=bad]     pam_unix.so          try_first_pass nullok
auth       [default=die]               pam_faillock.so      authfail
auth       required                    pam_faillock.so      authsucc
-auth      optional                    pam_systemd_home.so
auth       optional                    pam_permit.so
auth       required                    pam_env.so

account    required                    pam_unix.so
-account   optional                    pam_systemd_home.so
account    optional                    pam_permit.so
account    required                    pam_time.so

password   required                    pam_unix.so          try_first_pass nullok shadow sha512
-password  optional                    pam_systemd_home.so
password   optional                    pam_permit.so

session    required                    pam_limits.so
session    required                    pam_unix.so
session    optional                    pam_permit.so