#%PAM-1.0
auth       optional		pam_env.so
auth       required             pam_tally2.so onerr=succeed
auth       required             pam_shells.so
auth       required		pam_nologin.so
auth       [success=done ignore=ignore default=die] pam_pkcs11.so wait_for_card card_only
auth       optional             pam_permit.so

account    include		system-login

password   optional             pam_pkcs11.so
password   required             pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
password   optional             pam_permit.so

session    include		system-auth
#Systemd=-session   optional		pam_systemd.so
