#%PAM-1.0
auth    required        /lib/security/pam_env.so
auth    sufficient      /lib/security/pam_ldap.so use_first_pass
auth    required        /lib/security/pam_tcb.so shadow fork nullok use_first_pass
password        sufficient      /lib/security/pam_ldap.so use_first_pass
password        required        /lib/security/pam_tcb.so use_authtok shadow fork prefix=$2a$ count=8 write_to=tcb
session required        /lib/security/pam_env.so