#%PAM-1.0

auth       required	pam_env.so
auth       sufficient	pam_unix.so likeauth nullok
auth	   sufficient	pam_krb5.so use_first_pass
auth       required	pam_deny.so

account    required	pam_unix.so
account     [default=bad success=ok user_unknown=ignore service_err=ignore system_err=ignore] /lib/security/pam_krb5.so

password   required	pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
password   sufficient	pam_unix.so nullok md5 shadow use_authtok
password    sufficient    /lib/security/pam_krb5.so use_authtok
password   required	pam_deny.so

session    required	pam_limits.so
session    required	pam_unix.so
session     optional      /lib/security/pam_krb5.so