#%PAM-1.0 -*- mode: conf-space; tab-width: 8 -*-

auth	requisite			pam_faillock.so		preauth
auth	[success=1 default=ignore]	pam_localuser.so
auth	[success=3 default=2]		pam_kanidm.so
auth	[sucesss=2 default=ignore]	pam_unix.so		try_first_pass nullok
-auth	[success=1 default=ignore]	pam_systemd_home.so
auth	[default=die]			pam_faillock.so		authfail
auth	optional			pam_faillock.so		authsucc
auth	optional			pam_permit.so