auth        sufficient   pam_rootok.so
#auth       required     pam_wheel.so use_uid
auth        required     pam_env.so
auth        required     pam_unix.so nullok
auth        required     pam_tally2.so deny=3 even_deny_root  onerr=fail unlock_time=60
account     required     pam_tally2.so
account     required     pam_unix.so
password    required     pam_unix.so nullok
session     required     pam_limits.so
session     required     pam_env.so
session     required     pam_unix.so
session     required     pam_exec.so type=open_session seteuid /etc/pam_scripts/login.sh
