#%PAM-1.0
auth        required      pam_env.so
auth        sufficient    pam_succeed_if.so user ingroup nopasswdlogin
auth        substack      system-auth
-auth       optional      pam_gnome_keyring.so
-auth       optional      pam_oo7.so
auth        include       postlogin

account     required      pam_nologin.so
account     include       system-auth

password    substack      system-auth
password    optional      pam_gnome_keyring.so use_authtok
-password   optional       pam_oo7.so use_authtok

session     required      pam_loginuid.so
session     optional      pam_keyinit.so force revoke
session     required      pam_namespace.so
session     include       system-auth
-session    optional      pam_gnome_keyring.so auto_start
-session    optional      pam_oo7.so auto_start
session     include       postlogin
