This PAM configuration file supports the use of Kerberos authentication for integrating Linux into Active Directory.

system-auth

#%PAM-1.0
# This file is auto-generated.
# User changes will be destroyed the next time authconfig is run.
auth      required    /lib/security/$ISA/pam_env.so
auth      sufficient  /lib/security/$ISA/pam_unix.so likeauth nullok
auth      sufficient  /lib/security/$ISA/pam_krb5.so
auth      required    /lib/security/$ISA/pam_deny.so

account   sufficient  /lib/security/$ISA/pam_krb5.so
account   required    /lib/security/$ISA/pam_unix.so
account   sufficient  /lib/security/$ISA/pam_succeed_if.so uid < 100 quiet
account   required    /lib/security/$ISA/pam_deny.so

password  requisite   /lib/security/$ISA/pam_cracklib.so retry=3
password  sufficient  /lib/security/$ISA/pam_unix.so nullok use_authtok md5 shadow
password  required    /lib/security/$ISA/pam_deny.so

session   required    /lib/security/$ISA/pam_limits.so
session   required    /lib/security/$ISA/pam_unix.so