1#%PAM-1.0 2auth sufficient pam_pkcs11.so nullok try_first_pass \ 3 pkcs11_module=@libdir@/pkcs11/opensc-pkcs11.so \ 4 ca_dir=/usr/local/etc/pam_pkcs11 crl_dir=/usr/local/etc/pam_pkcs11 cert_policy=none 5auth required pam_securetty.so 6auth required pam_stack.so service=system-auth 7auth required pam_nologin.so 8account required pam_stack.so service=system-auth 9password required pam_stack.so service=system-auth 10session required pam_stack.so service=system-auth 11session optional pam_console.so 12