#%PAM-1.0
auth        required                                     pam_env.so
auth        sufficient                                   pam_unix.so nullok try_first_pass debug
auth        requisite                                    pam_succeed_if.so uid >= 1000 quiet_success
auth        sufficient                                   pam_sss.so forward_pass use_first_pass
auth        required                                     pam_deny.so
