#%PAM-1.0auth sufficient pam_rootok.soauth include system-authaccount required pam_permit.sopassword required pam_deny.sosession optional pam_xauth.so