# login: auth account password session auth optional pam_krb5.so auth optional pam_mount.so auth sufficient pam_serialnumber.so serverinstall legacy auth required pam_opendirectory.so account required pam_nologin.so account required pam_opendirectory.so password required pam_deny.so session required pam_launchd.so session required pam_uwtmp.so session optional pam_mount.so