auth    required        pam_winbind.so
auth       required     pam_nologin.so
auth       required     pam_stack.so service=system-auth
account    required     pam_stack.so service=system-auth
account    suffiicient  pam_winbind.so
session    required     pam_stack.so service=system-auth
password   required     pam_stack.so service=system-auth
password   required     pam_winbind.so

auth        required      /lib/security/$ISA/pam_deny.so

account     required      /lib/security/$ISA/pam_unix.so broken_shadow
account     sufficient    /lib/security/$ISA/pam_succeed_if.so uid <  100  quiet
account     [default=bad success=ok user_unknown=ignore] /lib/security/$ISA/pam_krb5.so
account     required      /lib/security/$ISA/pam_permit.so

password    requisite     /lib/security/$ISA/pam_cracklib.so retry= 3 
password    required      /lib/security/$ISA/pam_passwdqc.so min=disabled, 24 , 12 , 8 , 7  max= 40  passphrase= 3  match= 4  similar=deny random= 42  retry= 3  enforce=users
password    sufficient    /lib/security/$ISA/pam_unix.so nullok use_authtok shadow
password    sufficient    /lib/security/$ISA/pam_krb5.so use_authtok
password    required      /lib/security/$ISA/pam_deny.so

session     required      /lib/security/$ISA/pam_limits.so
session     required      /lib/security/$ISA/pam_unix.so
session optional map_mkhomedir.so skel=/etc/skel umask= 0644 

session     optional      /lib/security/$ISA/pam_krb5.s