#%PAM-1.0 auth required pam_tcb.so shadow fork prefix=$2a$ count=8 nullok use_first_pass password required pam_tcb.so use_authtok shadow fork prefix=$2a$ count=8 nullok write_to=tcb