6a7 > auth sufficient pam_ldap.so use_first_pass 9c10 < account required pam_unix.so --- > account required pam_unix.so broken_shadow 11a13 > account [default=bad success=ok user_unknown=ignore] pam_ldap.so 15a18 > password sufficient pam_ldap.so use_authtok 21a25 > session optional pam_ldap.so