#%PAM-1.0
# Block login if shell in nologin or false
auth      required pam_succeed_if.so shell notin /sbin/nologin:/usr/sbin/nologin:/bin/false:/usr/bin/false

# Block login if they are globally disabled
auth      required pam_nologin.so

# Load environment from /etc/environment and ~/.pam_environment
auth      required pam_env.so

# Allow access without authentication
auth      required pam_permit.so

# Authentication support for gnome-keyring and kwallet5
-auth     optional pam_gnome_keyring.so
-auth     optional pam_kwallet5.so

# Stop autologin if account requires action
account   required pam_unix.so

# Can't change password
password  required pam_deny.so

# Setup session
# Support elogind (for Slackware) rather than systemd (as per lightdm's upstream default)
session   required pam_unix.so
-session  optional pam_elogind.so
-session  optional pam_ck_connector.so nox11

# Auto-unlocking support for gnome-keyring and kwallet5
-session  optional pam_gnome_keyring.so auto_start
-session  optional pam_kwallet5.so auto_start