#%PAM-1.0
auth     required       pam_securetty.so
auth     required       pam_tally.so deny=5 onerr=fail
auth     include        common-auth
auth     required       pam_nologin.so
account  include        common-account
account  required       pam_tally.so
password include        common-password
session  include        common-session
session  required       pam_lastlog.so nowtmp
session  required       pam_resmgr.so
session  optional       pam_mail.so standard
session  optional       pam_loginuid.so     # no lockout on failure
