# login pam service with sha512 passwords. auth requisite pam_nologin.so auth required pam_securetty.so auth required pam_unix.so account required pam_access.so account required pam_unix.so session required pam_env.so session required pam_motd.so session optional pam_mail.so dir=/var/mail standard session optional pam_lastlog.so session required pam_unix.so session required pam_loginuid.so -session optional pam_systemd.so session required pam_limits.so password required pam_unix.so sha512 shadow nullok try_first_pass use_authtok