#%PAM-1.0

auth       required	pam_env.so
auth       required	pam_unix.so try_first_pass likeauth nullok
auth       [default=ignore]	pam_ssh.so try_first_pass

account    required	pam_unix.so

# This can be used only if you enabled the cracklib USE flag
password   required	pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 try_first_pass retry=3
# This can be used only if you enabled the cracklib USE flag
password   sufficient	pam_unix.so try_first_pass use_authtok nullok md5 shadow
# This can be used only if you enabled the !cracklib USE flag
# password   sufficient	pam_unix.so try_first_pass nullok md5 shadow
password   required	pam_deny.so

session    optional	pam_ssh.so
session    optional	pam_ssh_agent.so
session    required	pam_limits.so
session    required	pam_unix.so