1 #
  2 # /etc/pam.d/common-account - authorization settings common to all services
  3 #
  4 # This file is included from other service-specific PAM config files,
  5 # and should contain a list of the authorization modules that define
  6 # the central access policy for use on the system.  The default is to
  7 # only deny service to users whose accounts are expired in /etc/shadow.
  8 #
  9 #account        required        pam_unix.so
 10 
 11 account         sufficient      pam_ldap.so
 12 account         required        pam_unix.so try_first_pass
~                                                                               
~                                                                               
~