#%PAM-1.0

auth       requisite    pam_nologin.so
auth       include      system-local-login
account    include      system-local-login
session    include      system-local-login
session    optional     pam_umask.so       umask=0077
password   include      system-local-login