#
# See the pam_unix manpage for other options.
-password required pam_unix.so nullok obscure md5
+# Default was:
+# password required pam_unix.so nullok obscure md5
+#
+# LDAP config based on from http://wiki.debian.org/LDAP/PAM, but with use_authtok
+# options removed.
+password sufficient pam_unix.so nullok obscure md5
+password sufficient pam_ldap.so
+password required pam_deny.so
# Alternate strength checking for password. Note that this
# requires the libpam-cracklib package to be installed.