#%PAM-1.0
auth		[success=4 default=ignore]	pam_tcb.so shadow fork prefix=$2y$ count=8 nullok
auth		requisite	pam_succeed_if.so uid >= 500 quiet
auth		[success=1 default=ignore service_err=reset]	pam_krb5.so use_first_pass ccache=/tmp/krb5cc_%u
auth		[success=1 default=die]	pam_ccreds.so action=validate use_first_pass
auth		optional	pam_ccreds.so action=store use_first_pass
auth		required	pam_permit.so

account		include		system-auth-krb5
password	include		system-auth-krb5
session		include		system-auth-krb5
