#%PAM-1.0
auth		[success=1 default=ignore]	pam_pkcs11.so
auth		required	pam_tcb.so shadow fork prefix=$2a$ count=8 nullok
auth		required	pam_permit.so

account		required	pam_tcb.so shadow fork

password	required	pam_passwdqc.so config=/etc/passwdqc.conf
password	required	pam_tcb.so use_authtok shadow fork prefix=$2a$ count=8 nullok write_to=tcb

session		required	pam_tcb.so
session		required	pam_mktemp.so
session		required	pam_mkhomedir.so silent
session		required	pam_limits.so
