auth        required                                     pam_faillock.so preauth silent
auth        sufficient                                   pam_unix.so
auth        required                                     pam_faillock.so authfail
auth        required                                     pam_deny.so

account     required                                     pam_faillock.so

password    requisite                                    pam_pwquality.so local_users_only
password    requisite                                    pam_localuser.so
password    requisite                                    pam_pwhistory.so use_authtok enforce_for_root
password    sufficient                                   pam_unix.so sha512 shadow  use_authtok
password    required                                     pam_deny.so
