#%PAM-1.0
auth        required      pam_env.so
auth        sufficient    pam_succeed_if.so user ingroup nopasswdlogin
auth        substack      system-auth
auth        optional      pam_gnome_keyring.so
auth        include       postlogin

account     required      pam_nologin.so
account     include       system-auth

password    substack       system-auth
password   optional       pam_gnome_keyring.so use_authtok

session     required      pam_loginuid.so
session     optional      pam_console.so
session     optional      pam_keyinit.so force revoke
session     required      pam_namespace.so
session     include       system-auth
session     optional      pam_gnome_keyring.so auto_start
session     include       postlogin