+# Default was:
+# password required pam_unix.so nullok obscure md5
+#
+# LDAP config based on from http://wiki.debian.org/LDAP/PAM, but with use_authtok
+# options removed.
+password sufficient pam_unix.so nullok obscure md5
+password sufficient pam_ldap.so
+password required pam_deny.so