#%PAM-1.0
auth sufficient /lib/security/pam_linux_afs.so ignore_root
#auth sufficient /lib/security/pam_linux_afs.so no_unlog ignore_root
auth required /lib/security/pam_pwdb.so shadow nullok