#%PAM-1.0

auth		required	pam_nologin.so
auth		required	pam_unix.so shadow nullok
auth		required	pam_group.so

account		required	pam_unix.so

password	required	pam_unix.so nullok use_authtok md5 shadow

session		required	pam_env.so
session		required	pam_limits.so
session     required    pam_loginuid.so
session     required    pam_systemd.so
session		[success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid
session		optional	pam_lastlog.so never
session		optional	pam_motd.so
session		optional	pam_mail.so quiet
