#%PAM-1.0
auth		required	pam_shells.so
auth		required	pam_succeed_if.so quiet uid ne 0
auth		sufficient	pam_succeed_if.so user ingroup nopasswdlogin
auth		required	pam_pkcs11.so wait_for_card card_only
auth		optional	pam_gnome_keyring.so
account		include		system-auth-pkcs11
password	include		system-auth-pkcs11
password	required	pam_pkcs11.so
password	optional	pam_gnome_keyring.so use_authtok
session		substack	common-login
session		optional	pam_console.so
session		required	pam_namespace.so
session		optional	pam_gnome_keyring.so auto_start