#%PAM-1.0

auth       requisite                   pam_faillock.so      preauth
auth       required                    pam_pkcs11.so        wait_for_card card_only
auth       required                    pam_shells.so
auth       requisite                   pam_nologin.so
auth       optional                    pam_permit.so
auth       required                    pam_env.so
auth       [success=ok default=1]      pam_gdm.so
auth       optional                    pam_gnome_keyring.so

account    substack                    common-account
account    include                     postlogin-account

password   required                    pam_deny.so

session    substack                    common-session
session    include                     postlogin-session
session    optional                    pam_gnome_keyring.so auto_start