#%PAM-1.0 auth [user_unknown=ignore success=ok ignore=ignore default=bad] pam_securetty.so auth include system-auth account required pam_nologin.so account include system-auth password include system-auth session optional pam_keyinit.so force revoke session required pam_loginuid.so -session optional pam_console.so session include system-auth -session optional pam_ck_connector.so