#%PAM-1.0 auth required pam_tcb.so shadow fork prefix=$2a$ count=8 nullok account required pam_tcb.so shadow fork account required pam_mktemp.so password required pam_passwdqc.so min=disabled,24,12,8,7 max=40 passphrase=3 match=4 similar=deny random=42 enforce=users retry=3 password required pam_tcb.so use_authtok shadow fork prefix=$2a$ count=8 nullok write_to=tcb session required pam_tcb.so session required pam_limits.so