#%PAM-1.0

auth       substack        smartcard-auth
auth       requisite       pam_nologin.so
auth       requisite       pam_faillock.so      preauth
-auth      required        pam_pkcs11.so        wait_for_card card_only
auth       required        pam_shells.so
auth       optional        pam_permit.so
auth       required        pam_env.so

account    include         system-auth
account    include         smartcard-auth

password   required        pam_deny.so
password   include         smartcard-auth

session    include         system-auth
session    include         smartcard-auth
