#%PAM-1.0
# members of the "nopasswdlogin" group may log in without a password
auth       sufficient	pam_succeed_if.so user ingroup nopasswdlogin
auth       include	system-auth
account    include	system-auth
password   include	system-password
session    optional	pam_keyinit.so force revoke
session    include	system-session
