#%PAM-1.0
auth     requisite      pam_nologin.so
auth     required       pam_permit.so
account  substack       common-account
password substack       common-password
session  required       pam_loginuid.so
session  optional       pam_keyinit.so revoke force
session  substack       common-session
