7a8 > auth sufficient pam_ldap.so use_first_pass 10c11 < account required pam_unix.so --- > account required pam_unix.so broken_shadow 12a14 > account [default=bad success=ok user_unknown=ignore] pam_ldap.so 16a19 > password sufficient pam_ldap.so use_authtok 22a26 > session optional pam_ldap.so