auth    sufficient      pam_ldap.so
auth    required        pam_unix.so nullok_secure try_first_pass