auth sufficient pam_unix.so try_first_pass likeauth nullok
auth sufficient pam_ldap.so minimum_uid=1000 use_first_pass
auth optional required pam_permitpam_deny.so
account required pam_unix.so
account sufficient pam_ldap.so minimum_uid=1000 use_first_pass
account optional pam_permit.so
password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 retry=3
password required pam_unix.so try_first_pass use_authtok nullok sha512 shadow
password sufficient pam_ldap.so minimum_uid=1000 use_first_pass
password optional required pam_permitpam_deny.so
session required pam_limits.so
session required pam_unix.so
session sufficient pam_ldap.so minimum_uid=1000 use_first_pass
session optional pam_permit.so
</pre>