auth sufficient /lib/security/pam_ldap.so auth required /lib/security/pam_tcb.so shadow fork prefix=a$ count=8 nullok use_first_pass account sufficient /lib/security/pam_ldap.so account required /lib/security/pam_tcb.so shadow fork password sufficient /lib/security/pam_ldap.so password required /lib/security/pam_passwdqc.so min=disabled,24,12,8,7 max=40 passphrase=3 match=4 similar=deny random=42 enforce=users retry=3 password required /lib/security/pam_tcb.so use_authtok shadow fork prefix=a$ count=8 write_to=tcb session required /lib/security/pam_tcb.so session required /lib/security/pam_limits.so session required /lib/security/pam_mkhomedir.so skel=/etc/skel/ umask=0077