#%PAM-1.0
auth	sufficient	/lib/security/pam_winbind.so 
auth	required	/lib/security/pam_tcb.so shadow fork nullok
account	sufficient	/lib/security/pam_winbind.so 
account	required	/lib/security/pam_tcb.so shadow fork
password	required	/lib/security/pam_passwdqc.so min=disabled,24,12,8,7 max=40 passphrase=3 match=4 similar=deny random=42 enforce=users retry=3
password	required	/lib/security/pam_tcb.so use_authtok shadow fork prefix=$2a$ count=8 write_to=tcb
session	required	/lib/security/pam_mkhomedir.so skel=/etc/skel/ umask=0022 
session	required	/lib/security/pam_tcb.so
session	required	/lib/security/pam_limits.so
