#%PAM-1.0auth sufficient pam_rootok.soauth include system-authaccount include system-authpassword required pam_permit.sosession required pam_deny.so