#%PAM-1.0
auth     sufficient	pam_rootok.so
auth     required	pam_unix2.so	nullok
account  required	pam_unix2.so
password required	pam_pwcheck.so	nullok
password required	pam_unix2.so	nullok use_first_pass use_authtok
session  required	pam_deny.so